medium6.5
CVE-2021-39369
In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored …
Impact
In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored outside of the web root.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Philips | Myvue | All versions |
| Philips | Speech | All versions |
| Philips | Vue Motion | through 12.2.1.5 |
| Philips | Vue Pacs | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01
- https://www.usa.philips.com/healthcare
- https://www.youtube.com/watch?v=7zC84TNpIxw
- https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01
- https://www.usa.philips.com/healthcare
- https://www.youtube.com/watch?v=7zC84TNpIxw