CVE-2021-27456
Summary
| CVE | CVE-2021-27456 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2022-03-23 20:15:00 UTC |
| Updated | 2022-04-12 18:09:00 UTC |
| Description | Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control. |
Risk And Classification
Problem Types: CWE-922
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Phillips | Gemini 882160 | - | All | All | All |
| Operating System | Phillips | Gemini 882160 Firmware | - | All | All | All |
| Hardware | Phillips | Gemini 882300 | - | All | All | All |
| Operating System | Phillips | Gemini 882300 Firmware | - | All | All | All |
| Hardware | Phillips | Gemini 882390 | - | All | All | All |
| Operating System | Phillips | Gemini 882390 Firmware | - | All | All | All |
| Hardware | Phillips | Gemini 882400 | - | All | All | All |
| Operating System | Phillips | Gemini 882400 Firmware | - | All | All | All |
| Hardware | Phillips | Gemini 882410 | - | All | All | All |
| Operating System | Phillips | Gemini 882410 Firmware | - | All | All | All |
| Hardware | Phillips | Gemini 882412 | - | All | All | All |
| Operating System | Phillips | Gemini 882412 Firmware | - | All | All | All |
| Hardware | Phillips | Gemini 882470 | - | All | All | All |
| Operating System | Phillips | Gemini 882470 Firmware | - | All | All | All |
| Hardware | Phillips | Gemini 882471 | - | All | All | All |
| Operating System | Phillips | Gemini 882471 Firmware | - | All | All | All |
| Hardware | Phillips | Gemini 882473 | - | All | All | All |
| Operating System | Phillips | Gemini 882473 Firmware | - | All | All | All |
| Hardware | Phillips | Gemini 882476 | - | All | All | All |
| Operating System | Phillips | Gemini 882476 Firmware | - | All | All | All |
| Hardware | Phillips | Truflight 882438 | - | All | All | All |
| Operating System | Phillips | Truflight 882438 Firmware | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Philips Gemini PET/CT Family | CISA | CONFIRM | www.cisa.gov | |
| Product Security | Philips | CONFIRM | www.philips.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
Vendor Comments And Credit
Discovery Credit
LEGACY: Jean GEORGE – CHU UCL Namur – Nuclear medicine department reported this vulnerability to Philips.
There are currently no legacy QID mappings associated with this CVE.