CVE-2021-27456
Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control
Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
Attack profile
How easy it is to exploit
- Attack vector
- Physical
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- Low
- Integrity
- None
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control
Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
- Record
CVE-2021-27456- CVSS 3.1
- 2.4 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-921
- Updated
- 2026-11-02
EUVDEUVD-2021-14210
Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
- Record
EUVD-2021-14210- CVSS 3.1
- 2.4 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-r7hh-jqhx-m5xr
Philips Gemini PET/CT family software stores sensitive information in a removable media device...
Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
- Record
GHSA-r7hh-jqhx-m5xr- CVSS 3.1
- 2.4 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - Weakness
- CWE-922
- Updated
- 2026-11-02
NVD
Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
- Record
CVE-2021-27456- CVSS 3.1
- 2.4 Low
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N - CVSS 2.0
- 2.1 Low
AV:L/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-921, CWE-922
- Updated
- 2026-11-02
Affected products
- philips gemini 16 slice
- philips gemini dual
- philips gemini gxl 10 slice
- philips gemini gxl 16 slice
- philips gemini gxl 6 slice
- philips gemini lxl
- philips gemini tf 16 w/ tof performance
- philips gemini tf 64 w/ tof performance
- philips gemini tf big bore
- philips gemini tf ready
- philips truflight select pet/ct
- phillips gemini 882160 firmware
Show 10 moreShow less
- phillips gemini 882300 firmware
- phillips gemini 882390 firmware
- phillips gemini 882400 firmware
- phillips gemini 882410 firmware
- phillips gemini 882412 firmware
- phillips gemini 882470 firmware
- phillips gemini 882471 firmware
- phillips gemini 882473 firmware
- phillips gemini 882476 firmware
- phillips truflight 882438 firmware
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2021-27456 is a low vulnerability (CVSS 2.4) in Philips Gemini 16 Slice, published March 23, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.24%, the 15th percentile. No source names a fixed version.