Description
Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Philips | Vue PACS | unspecified – ≤ 12.2.x.x | — |
| Philips | Vue MyVue | unspecified – ≤ 12.2.x.x | — |
| Philips | Vue Speech | unspecified – ≤ 12.2.x.x | — |
| Philips | Vue Motion | unspecified – ≤ 12.2.1.5 | — |
Advisories 1
- ICSMA-21-187-01 Philips Vue PACS (Update B) CISA ICS & IT advisories · Apr 5, 2022