CVE-2023-40539: Philips Vue PACS Weak Password Requirements
Published Jul 18, 2024
·Updated
Philips Vue PACS does not require that users have strong passwords, which could make it easier for attackers to compromise user accounts.
Affected Software
1 affected component
Philips Vue PACS<12.2.8.410
Remediation
Information
Philips recommends configuring the Vue PACS environment per 8G7607 – Vue PACS User Guide Rev G available on Incenter http://incenter.medical.philips.com/Default.aspx .For managed services customers, new releases will be made available upon resource availability. Releases are subject to country specific regulations. Users with questions regarding their specific Philips Vue PACS installations and new release eligibility should contact their local Philips Sales representative or submit a request in the Philips Informatics Support portal https://usdhs-my.sharepoint.com/personal/grayson_gaylor_associates_cisa_dhs_gov1/_layouts/15/www.informatics.support.philips.com/csm .
Refer to the Philips advisory http://www.philips.com/productsecurity for more details.
Event History
Jul 18, 2024
CVE Published
via MITRE·04:29 PM
Rejected
via MITRE·04:29 PM
Apr 9, 2025
Rejected
via MITRE·08:25 PM
Frequently Asked Questions
1
What is the severity of CVE-2023-40539?
CVE-2023-40539 is considered a high-severity vulnerability due to the potential for account compromise.
2
How do I fix CVE-2023-40539?
To mitigate CVE-2023-40539, ensure that strong password policies are implemented and enforced.
3
What systems are affected by CVE-2023-40539?
CVE-2023-40539 affects Philips Vue PACS versions prior to 12.2.8.410.
4
What type of vulnerability is CVE-2023-40539?
CVE-2023-40539 is a vulnerability related to weak password requirements.
5
What are the potential risks associated with CVE-2023-40539?
The risks associated with CVE-2023-40539 include unauthorized access and potential data breaches due to compromised accounts.