Philips Vue PACS Improper Adherence to Coding Standards
CVE-2021-27501

7.5HIGH

Key Information:

Vendor

Philips
Status
Vue Pacs
Vue Myvue
Vue Speech
Vue Motion
Vendor
CVE Published:
1 April 2022

What is CVE-2021-27501?

Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Vue Motion <= 12.2.1.5

Vue MyVue <= 12.2.x.x

Vue PACS <= 12.2.x.x

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01
x_refsource_CONFIRM
http://www.philips.com/productsecurity
x_refsource_CONFIRM

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Philips reported these vulnerabilities to CISA.
JSON
.