CVE-2021-27456

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.

Betroffene Produkte Warnungen 0 Metriken 4 CWE 2 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Phillips ≫ Gemini 882300 Version-

Phillips ≫ Gemini 882160 Version-

Phillips ≫ Gemini 882400 Version-

Phillips ≫ Gemini 882390 Version-

Phillips ≫ Gemini 882410 Version-

Phillips ≫ Gemini 882412 Version-

Phillips ≫ Gemini 882473 Version-

Phillips ≫ Gemini 882470 Version-

Phillips ≫ Gemini 882471 Version-

Phillips ≫ Gemini 882476 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.08%	0.245

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	2.4	0.9	1.4	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N
ics-cert@hq.dhs.gov	2.4	0.9	1.4	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-921 Storage of Sensitive Data in a Mechanism without Access Control

The product stores sensitive information in a file system or device that does not have built-in access control.

CWE-922 Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Product

Third Party Advisory

US Government Resource

CVE Source (NVD)

CVE Source (JSON)

EUVD