CVEvulnerability
CVE-2021-27501
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-04-01
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-710
Description
Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.
Affected configurations
• philips myvue (< 12.2.1.5)
• philips speech (< 12.2.8.0)
• philips vue motion (< 12.2.1.5)
• philips vue pacs (< 12.2.8.0)
Related
Weakness · CWE (1)
- CWE-710 Improper Adherence to Coding Standards weakness
References
- http://www.philips.com/productsecurity Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01 Mitigation, Third Party Advisory, US Government Resource
- http://www.philips.com/productsecurity Vendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01 Mitigation, Third Party Advisory, US Government Resource