823 matches found
CVE-2023-40704 Philips Vue PACS Use of Default Credentials
The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity...
CVE-2023-40539
The CVE entry CVE-2023-40539 is associated with Philips Vue PACS and is documented in connected sources as Weak Password Requirements (CWE-521). The Philips advisory lists this vulnerability among others affecting Vue PACS versions prior to 12.2.8.400 and highlights that weak password controls co...
CVE-2023-40223
CVE-2023-40223 affects Philips Vue PACS. The vulnerability is categorized as Improper Privilege Management (CWE-269) in Vue PACS components, with affected product/version details indicating versions prior to 12.2.8.410 are impacted. The technical overview notes an unintended sphere of control due...
CVE-2023-40159
CVE-2023-40159 entry is rejected by its CVE Numbering Authority and does not represent an active vulnerability.
Philips Vue PACS (Update A)
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity Vendor : Philips Equipment : Vue PACS Vulnerabilities : Out-of-bounds Write, Deserialization of Untrusted Data, Uncontrolled Resource Consumption, Improper Privilege Management, Use of Default...
PT-2024-12895 · Philips · Philips Vue Pacs
Name of the Vulnerable Software and Affected Versions: Philips Vue PACS affected versions not specified Description: The issue is related to the lack of strong password requirements for users, which could facilitate the compromise of user accounts by attackers. Recommendations: At the moment, the...
PT-2024-12910 · Philips · Philips Vue Pacs
Name of the Vulnerable Software and Affected Versions: Philips Vue PACS affected versions not specified Description: The issue concerns the use of default credentials for potentially critical functionality in Philips Vue PACS. There is no information provided about the estimated number of...
PT-2024-12860 · Philips · Philips Vue Pacs
Name of the Vulnerable Software and Affected Versions: Philips Vue PACS affected versions not specified Description: A validated user not explicitly authorized to have access to certain sensitive information could access Philips Vue PACS on the same network to expose that information...
CVE-2023-40704: Use of Default Credentials
The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity...
PT-2024-12867 · Philips · Philips Vue Pacs
Name of the Vulnerable Software and Affected Versions: Philips Vue PACS affected versions not specified Description: The issue is related to improper assignment, modification, tracking, or checking of actor privileges, resulting in an unintended sphere of control for that actor. Recommendations: ...
File Upload Vulnerability in PACS System of Infinera Software (Shanghai) Co.
Infinera is a company specializing in the development of medical imaging systems. A file upload vulnerability exists in the PACS system of Infida Software Shanghai Co. Ltd. that can be exploited by an attacker to gain server privileges...
The vulnerability of the built-in server of the medical image and data management system Sante PACS Server PG allows a hacker to execute arbitrary codes.
The vulnerability in the embedded DICOM server of the medical image and data management system Sante PACS Server PG is related to the lack of measures taken to protect the SQL query structure when processing the NAME parameter of a patient record. Exploiting this vulnerability allows an attacker ...
CVE-2023-51637
Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server PG. Authentication is not required to exploit this vulnerability. The specific flaw exists with...
CVE-2023-51637
Sante PACS Server PG Patient Query SQL Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Sante PACS Server PG. Authentication is not required to exploit this vulnerability. The specific flaw exists with...