{"id":"CVE-2023-40704","aliases":["EUVD-2023-45259","GHSA-vh9f-gm3f-x483"],"status":"published","title":"Philips Vue PACS Use of Default Credentials","description":"The product does not require unique and complex passwords to be created \nduring installation. Using Philips's default password could jeopardize \nthe PACS system if the password was hacked or leaked. An attacker could \ngain access to the database impacting system availability and data \nintegrity.","severity":{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00338,"percentile":0.27519,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1392"],"published":"2024-07-18T16:33:27Z","modified":"2026-06-17T06:19:09Z","products":[{"vendor":"philips","product":"vue pacs"},{"vendor":"philips","product":"vue_pacs"}],"references":[{"url":"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-200-01","tags":["x_transferred","Third Party Advisory","US Government Resource"]},{"url":"http://www.philips.com/productsecurity","tags":["x_transferred","Product"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-40704"},{"url":"https://github.com/advisories/GHSA-vh9f-gm3f-x483"}],"sources":{"cve":[{"id":"CVE-2023-40704","title":"Philips Vue PACS Use of Default Credentials","description":"The product does not require unique and complex passwords to be created \nduring installation. Using Philips's default password could jeopardize \nthe PACS system if the password was hacked or leaked. An attacker could \ngain access to the database impacting system availability and data \nintegrity.","status":"published","published":"2024-07-18T16:33:27.444Z","modified":"2025-08-27T20:32:53.978Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N","level":"medium","assessor":"cna"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-1392"],"updated_at":"2026-11-02T14:35:21.612665Z"}],"euvd":[{"id":"EUVD-2023-45259","description":"The product does not require unique and complex passwords to be created \nduring installation. Using Philips's default password could jeopardize \nthe PACS system if the password was hacked or leaked. An attacker could \ngain access to the database impacting system availability and data \nintegrity.","status":"published","published":"2024-07-18T16:33:27Z","modified":"2025-08-27T20:32:53Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N","level":"medium"}],"updated_at":"2026-11-02T20:31:51.141859Z"}],"ghsa":[{"id":"GHSA-vh9f-gm3f-x483","title":"Philips Vue PACS uses default credentials for potentially critical functionality.","description":"Philips Vue PACS uses default credentials for potentially critical functionality.","status":"published","published":"2024-07-18T18:31:43Z","modified":"2024-08-07T05:04:09Z","cvss":[{"version":"4.0","score":8.4,"vector":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"high"},{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N","level":"high"}],"cwes":["CWE-1392"],"updated_at":"2026-11-02T14:57:52.94689Z"}],"nvd":[{"id":"CVE-2023-40704","description":"The product does not require unique and complex passwords to be created \nduring installation. Using Philips's default password could jeopardize \nthe PACS system if the password was hacked or leaked. An attacker could \ngain access to the database impacting system availability and data \nintegrity.","status":"published","published":"2024-07-18T17:15:03.897Z","modified":"2026-06-17T06:19:09.137Z","cvss":[{"version":"4.0","score":5.7,"vector":"CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"medium","assessor":"secondary"},{"version":"3.1","score":6.8,"vector":"CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-1392"],"updated_at":"2026-11-02T14:09:17.205287Z"}]}}