Lucene search

IcscertCVELIST:CVE-2021-27493

HistoryApr 01, 2022 - 10:17 p.m.

CVE-2021-27493 Philips Vue PACS

2022-04-0122:17:15

icscert

www.cve.org

philips vue pacs

cve-2021-27493

security issue

data validation

upstream component

downstream component

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

32.2%

JSON

Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.

CNA Affected

[
  {
    "product": "Vue PACS",
    "vendor": "Philips",
    "versions": [
      {
        "lessThanOrEqual": "12.2.x.x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Vue MyVue",
    "vendor": "Philips",
    "versions": [
      {
        "lessThanOrEqual": "12.2.x.x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Vue Speech",
    "vendor": "Philips",
    "versions": [
      {
        "lessThanOrEqual": "12.2.x.x",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "product": "Vue Motion",
    "vendor": "Philips",
    "versions": [
      {
        "lessThanOrEqual": "12.2.1.5",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

References

www.philips.com/productsecurity

www.cisa.gov/uscert/ics/advisories/icsma-21-187-01

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

32.2%

JSON

Related for CVELIST:CVE-2021-27493