ICSMA-21-313-01

icsaUScisa_csaf_ot

Philips MRI 1.5T and 3T (Update A)

view advisory published 2021-11-24

Successful exploitation of these vulnerabilities may allow an attacker with operator level access to view system configuration, view system files, and export data (including patient data) to an untrusted environment.

01

describes (3)

Related CVEs.

IDseverity exploitable
CVE-2021-42744USmedium5.5—
Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2021-26262USmedium5.5—
Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
CVE-2021-26248USmedium5.5—
Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
02

references

External citations — patches, advisories, analysis.

03

remediations (6)

  • MitigationMRI 1.5T

    As an interim mitigation to these vulnerabilities, Philips recommends the following:

  • MitigationMRI 1.5T

    As an interim mitigation to these vulnerabilities, Philips recommends the following:

  • MitigationMRI 1.5T

    As an interim mitigation to these vulnerabilities, Philips recommends the following:

  • MitigationMRI 3T

    As an interim mitigation to these vulnerabilities, Philips recommends the following:

  • MitigationMRI 3T

    As an interim mitigation to these vulnerabilities, Philips recommends the following:

  • MitigationMRI 3T

    As an interim mitigation to these vulnerabilities, Philips recommends the following:

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan