CVE-2023-40159 in Vue PACS

Summary

by MITRE • 07/18/2024

A validated user not explicitly authorized to have access to certain sensitive information could access Philips Vue PACS on the same network to expose that information.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: Icscert
• Reservation: 08/22/2023
• Disclosure: 07/18/2024
• Moderation: revoked
• Entry: VDB-271895
• CPE: ready
• CWE: CWE-200 (confirmed)
• CVSS: 6.5 (NVD)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Hospital, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-40159
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-40159
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-40159/