CVE-2021-27456

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.

Affected products Warnungen 0 Metrics 4 CWE 2 References 5

Data is provided by the National Vulnerability Database (NVD)

Phillips ≫ Gemini 882300 Version-

Phillips ≫ Gemini 882160 Version-

Phillips ≫ Gemini 882400 Version-

Phillips ≫ Gemini 882390 Version-

Phillips ≫ Gemini 882410 Version-

Phillips ≫ Gemini 882412 Version-

Phillips ≫ Gemini 882473 Version-

Phillips ≫ Gemini 882470 Version-

Phillips ≫ Gemini 882471 Version-

Phillips ≫ Gemini 882476 Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.08%	0.252

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	2.4	0.9	1.4	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
nvd@nist.gov	2.1	3.9	2.9	AV:L/AC:L/Au:N/C:P/I:N/A:N
ics-cert@hq.dhs.gov	2.4	0.9	1.4	CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

CWE-921 Storage of Sensitive Data in a Mechanism without Access Control

The product stores sensitive information in a file system or device that does not have built-in access control.

CWE-922 Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

Product

Third Party Advisory

US Government Resource

CVE Source (NVD)

CVE Source (JSON)

EUVD