CVE-2021-39369: Path Traversal
Published Dec 26, 2022
·Updated
In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web root.
Affected Software
4 affected components
Philips MyVue
Philips Speech
Philips Vue Motion<=12.2.1.5
Philips Vue PACS
Event History
Dec 26, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2021-39369.
2
What is the severity of CVE-2021-39369?
The severity of CVE-2021-39369 is medium with a CVSS score of 6.5.
3
Which software versions are affected by CVE-2021-39369?
Philips Vue MyVue PACS versions up to 12.2.x.x are affected by CVE-2021-39369.
4
What is the potential impact of CVE-2021-39369?
Authenticated users can perform path traversal and access files outside of the web root.
5
Are there any references or additional resources related to CVE-2021-39369?
Yes, you can find additional information about CVE-2021-39369 in the references provided: [link 1](https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01), [link 2](https://www.usa.philips.com/healthcare), [link 3](https://www.youtube.com/watch?v=7zC84TNpIxw).