CVE-2021-27456lowCWE-921

CVE-2021-27456: low-severity vulnerability in Philips Gemini 16 Slice

Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

Published · Updated

Follow this CVE+ Monitor Gemini 16 Slice+ Monitor Gemini Dual

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

8Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 2.4epss 0.2%
Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Affected products
Philips · Gemini 16 SlicePhilips · Gemini DualPhilips · Gemini GXL 10 SlicePhilips · Gemini GXL 16 SlicePhilips · Gemini GXL 6 SlicePhilips · GEMINI LXLPhilips · Gemini TF 16 w/ TOF PerformancePhilips · Gemini TF 64 w/ TOF PerformancePhilips · Gemini TF Big BorePhilips · Gemini TF ReadyPhilips · TruFlight Select PET/CT