CVE-2021-27493

Summary (CVE-2021-27493): Philips Vue PACS (versions 12.2.x.x and prior) contains a logic/validation issue where structured messages or data are not consistently well-formed before reading from an upstream component or sending to a downstream component. This is documented as improper input valida...

PT-2022-10190 · Philips · Philips Vue Pacs

Name of the Vulnerable Software and Affected Versions: Philips Vue PACS versions 12.2.x.x and prior Description: The issue concerns the use of a cryptographic key or password past its expiration date, which significantly diminishes safety by increasing the timing window for cracking attacks again...

PT-2022-9834

Name of the Vulnerable Software and Affected Versions Philips Vue PACS versions 12.2.x.x and prior Description The issue arises from the software not ensuring or incorrectly ensuring that structured messages or data are well-formed and that certain security properties are met before being read fr...

PT-2022-10189

Name of the Vulnerable Software and Affected Versions Philips Vue PACS versions prior to 12.2.x.x Description The use of a broken or risky cryptographic algorithm may result in the exposure of sensitive information. Recommendations For Philips Vue PACS versions prior to 12.2.x.x, update to a...

PT-2022-10192

Name of the Vulnerable Software and Affected Versions Philips Vue PACS versions prior to 12.2.x.x Description The issue concerns the transmission and storage of authentication credentials using an insecure method, making them susceptible to unauthorized interception and/or retrieval...

PT-2022-10191

Name of the Vulnerable Software and Affected Versions Philips Vue PACS versions 12.2.x.x and prior Description The issue concerns the transmission of sensitive or security-critical data in cleartext in a communication channel, making it possible for unauthorized actors to intercept this data...

CVE-2021-33018: Use of a Broken or Risky Cryptographic Algorithm

The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of sensitive information...

CVE-2021-33022: Cleartext Transmission of Sensitive Information

Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors...

CVE-2021-27497: Protection Mechanism Failure

Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product...

CVE-2021-33024: Insufficiently Protected Credentials

Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interception and/or retrieval...

CVE-2021-33020: Use of a Key Past its Expiration Date

Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key...

CVE-2021-27501: Improper Adherence to Coding Standards

Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities...

CVE-2021-27493: Improper Neutralization

Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component...

PT-2022-9835

Name of the Vulnerable Software and Affected Versions Philips Vue PACS versions 12.2.x.x and prior Description The issue is related to the incorrect or insufficient use of a protection mechanism, which provides inadequate defense against directed attacks. Recommendations For Philips Vue PACS...

PT-2022-9836

Name of the Vulnerable Software and Affected Versions Philips Vue PACS versions 12.2.x.x and prior Description The issue is related to the software not following certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities...

Philips e-Alert 访问控制错误漏洞

Philips Philips e-Alert is a proactive, sensor-based approach to monitoring imaging systems from Philips in the Netherlands. Provides rapid insight into critical MRI parameters, helping biomedical and Philips service engineers take quick action to resolve issues before they escalate. An access...

Philips e-Alert

1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable from an adjacent network/low attack complexity Vendor: Philips Equipment: e-Alert Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability may allow an unauthorized actor to...

CVE-2021-27456

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

Improper access control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...

CVE-2021-27456 Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control...