PT-2021-23671 · Philips · Philips Mri 1.5T+1

Michael Aguilar · Published 2021-11-19 · Updated 2022-08-09 · CVE-2021-42744

Positive Technologies (AI Summary)

CVSS v4.0

5.9

Medium

Base vector

AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Name of the Vulnerable Software and Affected Versions Philips MRI 1.5T and MRI 3T Version 5.x.x

Description The issue exposes sensitive information to an actor not explicitly authorized to have access.

Recommendations For Philips MRI 1.5T and MRI 3T Version 5.x.x, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Information Disclosure

Files Accessible to External Parties

Weakness Enumeration

CWE-200

CWE-552

Related Identifiers

CVE-2021-42744

Affected Products

Philips Mri 1.5T

Philips Mri 3T

References · 6

• https://usa.philips.com/healthcare/about/customer-support/product-security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-42744 · Security Note
• https://osv.dev/vulnerability/CVE-2021-42744 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsma-21-313-01 · Note
• https://t.me/cibsecurity/32737 · Telegram Post
• https://t.me/cvenotify/34440 · Telegram Post