Paper/Archive/CVE-2021-27501

CVE-2021-27501

Philips Vue PACS — Philips Vue PACS Improper Adherence to Coding Standards

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 60.4.604 × 2012.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the severity of the associated vulnerabilities.

Affected

ProductAffectedFixed inSource

Vue PACSunspecified – 12.2.x.x–CNA

Vue MyVueunspecified – 12.2.x.x–CNA

Vue Speechunspecified – 12.2.x.x–CNA

Vue Motionunspecified – 12.2.1.5–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

icscert (CNA)7.5CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcisa.gov/uscert/ics/advisories/icsma-21-187-01 refphilips.com/productsecurity