Summary
Successful exploitation of this vulnerability involving removable media could allow access to sensitive information (including patient information).
Vulnerabilities 1
-
Low 2.4
Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control
Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
Revision history
-
#1
ICSMA-21-084-01 Philips Gemini PET CT Family
References
-
ICS Advisory ICSMA-21-084-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-21-084-01
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B