Skip to content
OpenAdvisories
Medium ICSMA-21-313-01 3 CVEs

Philips MRI 1.5T and 3T (Update A)

Published Nov 24, 2021 · Updated Mar 26, 2026 · Revision 2

Vendor: Philips Product: MRI 1.5T Product: MRI 3T

Summary

Successful exploitation of these vulnerabilities may allow an attacker with operator level access to view system configuration, view system files, and export data (including patient data) to an untrusted environment.

Vulnerabilities 3

  • Medium 5.9
    CVE-2021-26248

    Philips MRI 1.5T and 3T Incorrect Ownership Assignment

    Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

    Philips MRI 1.5T MRI 3T
  • Medium 5.9
    CVE-2021-26262

    Philips MRI 1.5T and 3T Improper Access Control

    Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

    Philips MRI 3T MRI 1.5T
  • Medium 5.9
    CVE-2021-42744

    Philips MRI 1.5T and 3T Information Exposure

    Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

    Philips MRI 1.5T MRI 3T

Revision history

  1. #2

    Update A - Updated Risk Evaluation, Affected versions updated to "5.3 to 5.8.1", CVSS

  2. #1

    Initial Publication

References