CVE-2023-40223
Philips Vue PACS Improper Privilege Management
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Philips Vue PACS Improper Privilege Management
| Assigner | icscert |
| Reserved | 2023-08-21 |
| Published | 2024-07-18 |
| Updated | 2024-08-02 |
Philips Vue PACS does not properly assign, modify, track, or check actor privileges, creating an unintended sphere of control for that actor.
| CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N | |
| CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N |
CWE-269 Improper Privilege Management
TAS Health NZ and Camiel van Es reported these vulnerabilities to Philips.
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-200-01
http://www.philips.com/productsecurity
