CVEvulnerability
CVE-2021-27493
6.5 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2022-04-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- CVSS 3.1 ([email protected])
- 6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-707
Description
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
Affected configurations
• philips myvue (< 12.2.1.5)
• philips speech (< 12.2.8.0)
• philips vue motion (< 12.2.1.5)
• philips vue pacs (< 12.2.8.0)
Related
Weakness · CWE (1)
- CWE-707 Improper Neutralization weakness
References
- http://www.philips.com/productsecurity Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01 Third Party Advisory, US Government Resource
- http://www.philips.com/productsecurity Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01 Third Party Advisory, US Government Resource