CVE-2021-27493
Philips Vue PACS
Severity Score
6.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
Philips Vue PACS versiones 12.2.x.x y anteriores, no asegura o asegura incorrectamente que los mensajes o datos estructurados estén bien formados y que sean cumplidas determinadas propiedades de seguridad antes de ser leídos desde un componente ascendente o enviados a un componente descendente
*Credits:
Philips reported these vulnerabilities to CISA.
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-02-19 CVE Reserved
- 2022-04-01 CVE Published
- 2024-08-03 CVE Updated
- 2024-12-17 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
CAPEC
References (2)
| URL | Tag | Source |
|---|---|---|
| https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| http://www.philips.com/productsecurity | 2022-07-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Philips Search vendor "Philips" | Myvue Search vendor "Philips" for product "Myvue" | < 12.2.1.5 Search vendor "Philips" for product "Myvue" and version " < 12.2.1.5" | - |
Affected
| ||||||
| Philips Search vendor "Philips" | Speech Search vendor "Philips" for product "Speech" | < 12.2.8.0 Search vendor "Philips" for product "Speech" and version " < 12.2.8.0" | - |
Affected
| ||||||
| Philips Search vendor "Philips" | Vue Motion Search vendor "Philips" for product "Vue Motion" | < 12.2.1.5 Search vendor "Philips" for product "Vue Motion" and version " < 12.2.1.5" | - |
Affected
| ||||||
| Philips Search vendor "Philips" | Vue Pacs Search vendor "Philips" for product "Vue Pacs" | < 12.2.8.0 Search vendor "Philips" for product "Vue Pacs" and version " < 12.2.8.0" | - |
Affected
| ||||||