Lucene search

K
nvd[email protected]NVD:CVE-2023-40539
HistoryJul 18, 2024 - 5:15 p.m.

CVE-2023-40539

2024-07-1817:15:03
CWE-521
web.nvd.nist.gov
5
philips vue pacs
weak password
user accounts
compromise
vulnerability

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

37.7%

Philips Vue PACS does not require that users have strong passwords, which could make it easier for attackers to compromise user accounts.

Affected configurations

Nvd
Node
philipsvue_pacsRange<12.2.8.410
VendorProductVersionCPE
philipsvue_pacs*cpe:2.3:a:philips:vue_pacs:*:*:*:*:*:*:*:*

CVSS3

5.9

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS

0.001

Percentile

37.7%

Related for NVD:CVE-2023-40539