CVE-2021-27456: Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control
Published Mar 23, 2022
·Updated
Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
Affected Software
22 affected components
Phillips Gemini 882300 Firmware
Phillips Gemini 882300
Phillips Gemini 882160 Firmware
Phillips Gemini 882160
Phillips Gemini 882400 Firmware
Phillips Gemini 882400
Phillips Gemini 882390 Firmware
Phillips Gemini 882390
Phillips Gemini 882410 Firmware
Phillips Gemini 882410
Phillips Gemini 882412 Firmware
Phillips Gemini 882412
Phillips Gemini 882473 Firmware
Phillips Gemini 882473
Phillips Gemini 882470 Firmware
Phillips Gemini 882470
Phillips Gemini 882471 Firmware
Phillips Gemini 882471
Phillips Gemini 882476 Firmware
Phillips Gemini 882476
Phillips Truflight 882438 Firmware
Phillips Truflight 882438
Event History
Mar 23, 2022
CVE Published
via MITRE·07:46 PM
Data Sourced
via MITRE·07:46 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2021-27456?
CVE-2021-27456 is a vulnerability in the Philips Gemini PET/CT family software that allows sensitive information to be stored in a removable media device without built-in access control.
2
Is Philips Gemini 882300 affected by CVE-2021-27456?
No, Philips Gemini 882300 is not affected by CVE-2021-27456.
3
How severe is CVE-2021-27456?
CVE-2021-27456 has a severity rating of 2.4, which is considered low.
4
How can I fix CVE-2021-27456?
To fix CVE-2021-27456, it is recommended to apply the necessary patches or updates provided by Philips.
5
Where can I find more information about CVE-2021-27456?
You can find more information about CVE-2021-27456 on the official websites of CISA and Philips.