CVE-2021-33020CWE-324

Philips Vue PACS Use of a Key Past its Expiration Date

High · published April 1, 2022

CVSS v3.1
8.2
EPSS
1%
Percentile
49.4
In the wild
Unconfirmed
What it is

Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00627 · 49.4th percentile
Weakness
CWE-324 · Use of a Key Past its Expiration Date
Published
2022-04-01T22:17Z
EPSS history
Timeline
  • 01 APR 22:17Z
    Philips Vue PACS Use of a Key Past its Expiration Date
    cvelistv5