Default Credentials Expose Philips Vue PACS to Security Risks
CVE-2023-40704
5.7MEDIUM
Summary
Philips Vue PACS employs default credentials that expose critical functionality to potential unauthorized access. This vulnerability highlights significant security risks within the system, allowing threat actors to exploit unsecured accounts, potentially compromising sensitive patient data and overall system integrity. Organizations utilizing this product should prioritize changing default credentials to enhance security and mitigate risks associated with unauthorized system access.
Affected Version(s)
Vue PACS 0 < 12.2.8.410
References
CVSS V4
Score:
5.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
Vulnerability published
Vulnerability Reserved
Credit
TAS Health NZ and Camiel van Es reported these vulnerabilities to Philips.