CVE-2021-27456

Published: Mar 23, 2022Modified: Jun 17, 2026

2.4

Vector

CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploitability: 0.9 / Impact: 1.4

Source: NVD

Description

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.

Affected (11)

Products: Phillips: Gemini 882300 Firmware, Gemini 882160 Firmware, Gemini 882400 Firmware, Gemini 882390 Firmware, Gemini 882410 Firmware, Gemini 882412 Firmware, Gemini 882473 Firmware, Gemini 882470 Firmware, Gemini 882471 Firmware, Gemini 882476 Firmware, Truflight 882438 Firmware

Phillips

11 products

Gemini 882300 Firmware

Gemini 882160 Firmware

Gemini 882400 Firmware

Gemini 882390 Firmware

Gemini 882410 Firmware

Gemini 882412 Firmware

Gemini 882473 Firmware

Gemini 882470 Firmware

Gemini 882471 Firmware

Gemini 882476 Firmware

Truflight 882438 Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882300 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882300	All versions

Configuration B

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882160 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882160	All versions

Configuration C

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882400 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882400	All versions

Configuration D

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882390 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882390	All versions

Configuration E

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882410 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882410	All versions

Configuration F

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882412 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882412	All versions

Configuration G

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882473 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882473	All versions

Configuration H

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882470 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882470	All versions

Configuration I

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882471 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882471	All versions

Configuration J

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Gemini 882476 Firmware	All versions

Running on/with	Platform Versions
Phillips Gemini 882476	All versions

Configuration K

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Phillips Truflight 882438 Firmware	All versions

Running on/with	Platform Versions
Phillips Truflight 882438	All versions

Related CWEs

CWE-921

Storage of Sensitive Data in a Mechanism without Access Control

The product stores sensitive information in a file system or device that does not have built-in access control.

CWE-922

Insecure Storage of Sensitive Information

The product stores sensitive information without properly limiting read or write access by unauthorized actors.

References (4)

https://www.cisa.gov/uscert/ics/advisories/icsma-21-084-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://www.philips.com/productsecurity

Source: ics-cert@hq.dhs.gov

Product

https://www.cisa.gov/uscert/ics/advisories/icsma-21-084-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

https://www.philips.com/productsecurity

Source: af854a3a-2127-422b-91ae-364da2661108

Product

Timeline

No history available yet.