CVE-2021-27493
Last modified
CVE-2021-27493 is a medium-severity vulnerability rated 6.5/10 on the CVSS scale. Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.. EPSS estimates a 0.65% chance of exploitation in the next 30 days.
Description
Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Philips | Myvue | < 12.2.1.5 |
| Philips | Speech | < 12.2.8.0 |
| Philips | Vue Motion | < 12.2.1.5 |
| Philips | Vue Pacs | < 12.2.8.0 |
References
- http://www.philips.com/productsecurityVendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01Third Party Advisory, US Government Resource
- http://www.philips.com/productsecurityVendor Advisory
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01Third Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-27493?
How severe is CVE-2021-27493?
How do I fix CVE-2021-27493?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-27487ZOLL Defibrillator Dashboard, v prior to 2.2, The affected p…5.5
- CVE-2021-27488Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, S…7.8
- CVE-2021-27489ZOLL Defibrillator Dashboard, v prior to 2.2, The web applic…8.8
- CVE-2021-27490Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, S…7.8
- CVE-2021-27491Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed myli…7.5
- CVE-2021-27492When opening a specially crafted 3DXML file, the application…5.5
- CVE-2021-27494Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, S…7.8
- CVE-2021-27495Ypsomed mylife Cloud, mylife Mobile Application:Ypsomed myli…7.1
- CVE-2021-27496Datakit Software libraries CatiaV5_3dRead, CatiaV6_3dRead, S…7.8
- CVE-2021-27497Philips Vue PACS versions 12.2.x.x and prior does not use or…9.8
- CVE-2021-27498A specifically crafted packet sent by an attacker to EIPStac…7.5
- CVE-2021-27499Ypsomed mylife Cloud, mylife Mobile Application, Ypsomed myl…5.9
Are you affected by CVE-2021-27493?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST