CVE-2023-40223 in Vue PACS

Summary

by MITRE • 07/18/2024

Philips Vue PACS does not properly assign, modify, track, or check actor privileges, creating an unintended sphere of control for that actor.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Responsible: Icscert
• Reservation: 08/22/2023
• Disclosure: 07/18/2024
• Moderation: revoked
• Entry: VDB-271898
• CPE: ready
• CWE: CWE-269 (confirmed)
• CVSS: 8.8 (NVD)
• EPSS: 0.00000
• KEV: no
• Activities: very low
• Sector: Pharma, Chemical, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2023-40223
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2023-40223
• CVE Details: https://www.cvedetails.com/cve/CVE-2023-40223/