Skip to content
OpenAdvisories

Vendor

Philips

88 known vulnerabilities.

Products

e-Alert Unit (non-medical device) 9 Philips IntelliSpace Portal 9 Vue PACS 8 Hue Bridge 8 Vue MyVue 7 Vue Speech 7 Vue Motion 7 Patient Information Center iX (PICiX) 7 Clinical Collaboration Platform 5 IntelliSpace Portal 3 MRI 1.5T 3 MRI 3T 3 SureSigns VS4 3 Brilliance CT Scanners 3 PerformanceBridge Focal Point 3 Patient Information Center iX (PIC iX) 3 DoseWise Portal 2 IntelliVue MX40 Patient Worn Monitor 2 PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs 2 IntelliSpace Cardiovascular (ISCV) products 2 IntelliBridge EC 40 Hub 2 IntelliBridge EC 80 Hub 2 Philips Alice 6 System 2 IntelliVue patient monitors 2 Intellispace Cardiovascular (ISCV) 2 e-Alert 1 Interoperability Solution XDS 1 Philips Holter 2010 Plus 1 Ultrasound ClearVue 1 Ultrasound CX 1 Ultrasound EPIQ/Affiniti 1 Ultrasound Sparq 1 Ultrasound Xperius 1 Engage Software 1 DreamMapper 1 EncoreAnywhere 1 Gemini 16 Slice 1 Gemini Dual 1 Gemini GXL 10 Slice 1 Gemini GXL 6 Slice 1
All Critical High Medium Low Exploited only Public exploit

9 results · Clear filters · Feed

  • Low 3.7
    CVE-2021-32966

    Philips Interoperability Solution XDS - Clear Text Transmission of Sensitive Information

    Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information when configured to use LDAP via TLS and where the domain controller returns LDAP referrals, which may …

    Philips Interoperability Solution XDS
  • Low 3.7
    CVE-2021-33024

    Philips Vue PACS Insufficiently Protected Credentials

    Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interception and/or retrieval.

    Philips Vue PACS Vue MyVue Vue Motion
  • Low 2.4
    CVE-2021-27456

    Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

    Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.

    Philips Gemini GXL 16 Slice Gemini TF Ready Gemini TF 64 w/ TOF Performance
  • Low 2.6
    CVE-2021-23173

    ICSMA-22-006-01 Philips Engage Software

    The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data.

    Philips Engage Software
  • Low 3.5
    CVE-2020-14525

    Philips Clinical Collaboration Platform Improper Neutralization of Script in Attributes in a Web Page

    Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output used as a webpage that is served to other users.

    Philips Clinical Collaboration Platform
  • Low 3.4
    CVE-2020-14506

    Philips Clinical Collaboration Platform Cross-site Request Forgery

    Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

    Philips Clinical Collaboration Platform
  • Low 2.1
    CVE-2020-16237

    Philips SureSigns VS4 Improper Input Validation

    Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required to process the data safely and correctly.

    Philips SureSigns VS4
  • Low 3.6
    CVE-2020-14477

    Philips Ultrasound Systems Authentication Bypass Using an Alternate Path or Channel

    In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sparq Version 3.0.2 and prior and Ultrasound Xperius all versions, an attacker may use an alternate pa…

    Philips Ultrasound CX Ultrasound Sparq Ultrasound ClearVue
  • Low 2.0
    CVE-2020-12023

    Philips IntelliBridge Enterprise IBE Insertion of Sensitive Information into Log File

    Philips IntelliBridge Enterprise (IBE), Versions B.12 and prior, IntelliBridge Enterprise system integration with SureSigns (VS4), EarlyVue (VS30) and IntelliVue Guardian (IGS). Unencrypted user credentials received in the IntelliBridge Enterprise (IBE) are l…

    Philips IntelliBridge Enterprise (IBE)