← back
CVE-2023-40704mediumCWE-1392

Philips Vue PACS Use of Default Credentials

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.7epss 0.3%
exploitation probability
0.3%top 73% of all CVEs
observed exploitation
nono source reports it
The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity.
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N
Affected products
Philips · Vue PACS