PT-2022-9836 · Philips · Philips Vue Pacs

Published 2022-04-01 · Updated 2022-04-08 · CVE-2021-27501

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Philips Vue PACS versions 12.2.x.x and prior

Description The issue is related to the software not following certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Recommendations For Philips Vue PACS versions 12.2.x.x and prior, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-710

Related Identifiers

CVE-2021-27501

Affected Products

Philips Vue Pacs

References · 4

• http://philips.com/productsecurity · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27501 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27501 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsma-21-187-01 · Note