Riskcovery

CVE-2021-27456

Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

State
Published
Severity
2.4 Low
Published
Mar 23, 2022
Updated
Apr 16, 2025
Reserved
Feb 19, 2021

Read the record on cve.org

Description

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.

Scores

CVSSScoreVectorSource
3.12.4 LowCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:Nicscert

Weaknesses

  • CWE-921 Storage of Sensitive Data in a Mechanism without Access Control

Affected Products

ProductVersions
Gemini 16 SlicePhilips
  • 882300Affected
Gemini DualPhilips
  • 882160Affected
Gemini GXL 10 SlicePhilips
  • 882400Affected
Gemini GXL 6 SlicePhilips
  • 882390Affected
Gemini GXL 16 SlicePhilips
  • 882410Affected
GEMINI LXLPhilips
  • 882412Affected
Gemini TF ReadyPhilips
  • 882473Affected
Gemini TF 16 w/ TOF PerformancePhilips
  • 882470Affected
Gemini TF 64 w/ TOF PerformancePhilips
  • 882471Affected
Gemini TF Big BorePhilips
  • 882476Affected
TruFlight Select PET/CTPhilips
  • 882438Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.