PT-2022-10190 · Philips · Philips Vue Pacs

Published 2022-04-01 · Updated 2023-07-07 · CVE-2021-33020

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Philips Vue PACS versions 12.2.x.x and prior

Description The issue concerns the use of a cryptographic key or password past its expiration date, which significantly diminishes safety by increasing the timing window for cracking attacks against that key.

Recommendations For Philips Vue PACS versions 12.2.x.x and prior, update the cryptographic key or password to a current, valid one to mitigate the risk of cracking attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-672

CWE-324

Related Identifiers

CVE-2021-33020

Affected Products

Philips Vue Pacs

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-33020 · Security Note
• http://philips.com/productsecurity · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-33020 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsma-21-187-01 · Note
• https://t.me/cvenotify/28312 · Telegram Post