EUVD-2026-251094

fkie_cve-2023-40704

The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity.

GHSA-vh9f-gm3f-x483

Philips Vue PACS uses default credentials for potentially critical functionality.

ICSMA-24-200-01 — Philips Vue PACS (Update A)

Attackers can exploit this vulnerability by making numerous requests or sending large amounts of data to the application, leading to resource exhaustion (e.g., memory, CPU), which can cause the application to crash or become unresponsive. This vulnerability does not expose patient data or allow for its modification. It allows an attacker, with access to the hospital's private network, which is protected by security controls (e.g., firewalls, VPNs), to send messages to the server, leading to potential CPU overload and a denial-of-service (DoS) condition. No response is sent back to the attacker, and patient information remains secure. The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity.

Most recent entries from all

EUVD-2026-251094

fkie_cve-2023-40704

GHSA-vh9f-gm3f-x483

gsd-2023-40704

ICSMA-24-200-01 — Philips Vue PACS (Update A)