CVE-2021-33024 — Philips Vue PACS Insufficiently Protected Credentials

Description (CNA)

Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interception and/or retrieval.

Affected (CNA)

Vendor / product	Versions
Philips / Vue PACS	affected unspecified through 12.2.x.x
Philips / Vue MyVue	affected unspecified through 12.2.x.x
Philips / Vue Speech	affected unspecified through 12.2.x.x
Philips / Vue Motion	affected unspecified through 12.2.1.5

CWE

CWE-522

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01
http://www.philips.com/productsecurity

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01
http://www.philips.com/productsecurity

CISA-ADP

No English description supplied.

No references supplied.