VulnerabilityModified
CVE-2021-27493
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
MEDIUM 6.5EPSS 0.68%
Does this matter?
Lower severity and a low EPSS score (0.68%). Track it; it rarely justifies an emergency change on its own.
Description
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
- CVSS 3.1
- 6.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
- EPSS
- 0.68% probability · 50th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-707
- Affected
- philips/myvue · philips/speech · philips/vue motion · philips/vue pacs
- Source
- ics-cert@hq.dhs.gov
References
- http://www.philips.com/productsecurityVendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01Third Party Advisory, US Government Resource
- http://www.philips.com/productsecurityVendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.