Description
Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Philips | Vue PACS | unspecified – ≤ 12.2.x.x | — |
| Philips | Vue MyVue | unspecified – ≤ 12.2.x.x | — |
| Philips | Vue Speech | unspecified – ≤ 12.2.x.x | — |
| Philips | Vue Motion | unspecified – ≤ 12.2.1.5 | — |
Advisories 1
- ICSMA-21-187-01 Philips Vue PACS (Update B) CISA ICS & IT advisories · Apr 5, 2022