{"id":"CVE-2021-27493","aliases":["EUVD-2021-14247","GHSA-95hc-22p8-fq93"],"status":"published","title":"Philips Vue PACS","description":"Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.","severity":{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0068,"percentile":0.52889,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-707","CWE-74"],"published":"2022-04-01T22:17:15Z","modified":"2026-06-17T03:44:58Z","products":[{"vendor":"philips","product":"myvue"},{"vendor":"philips","product":"speech"},{"vendor":"philips","product":"vue motion"},{"vendor":"philips","product":"vue myvue"},{"vendor":"philips","product":"vue pacs"},{"vendor":"philips","product":"vue speech"},{"vendor":"philips","product":"vue_motion"},{"vendor":"philips","product":"vue_pacs"}],"references":[{"url":"https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.philips.com/productsecurity","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27493"},{"url":"https://github.com/advisories/GHSA-95hc-22p8-fq93"}],"sources":{"cve":[{"id":"CVE-2021-27493","title":"Philips Vue PACS ","description":"Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.","status":"published","published":"2022-04-01T22:17:15Z","modified":"2025-04-17T15:51:19.901Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-707"],"updated_at":"2026-11-02T14:33:04.360272Z"}],"euvd":[{"id":"EUVD-2021-14247","description":"Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.","status":"published","published":"2022-04-01T22:17:15Z","modified":"2025-04-17T15:51:19Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T20:52:21.05399Z"}],"ghsa":[{"id":"GHSA-95hc-22p8-fq93","title":"Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured...","description":"Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.","status":"published","published":"2022-04-03T00:01:03Z","modified":"2025-04-17T18:32:10Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-74","CWE-707"],"updated_at":"2026-11-02T15:01:37.419664Z"}],"nvd":[{"id":"CVE-2021-27493","description":"Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an upstream component or sent to a downstream component.","status":"published","published":"2022-04-01T23:15:09.207Z","modified":"2026-06-17T03:44:58.277Z","cvss":[{"version":"3.1","score":6.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":6.4,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-707"],"updated_at":"2026-11-02T14:07:05.581807Z"}]}}