Vulnerabilities > CVE-2021-33020 - Operation on a Resource after Expiration or Release vulnerability in Philips products

047910
CVSS 7.5 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
NONE
Availability impact
NONE
network
low complexity
philips
CWE-672

Summary

Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.

Vulnerable Configurations

Part Description Count
Application
Philips
4