Low 3.7HealthcarePublished Apr 1, 2022

CVE-2021-33024Philips Vue PACS Insufficiently Protected Credentials

Updated under an hour ago (Oct 29, 2026, 12:00 PM ET)

Does this affect you?

It affects Philips Vue PACS and 5 other products. Add what you run to find out whether that includes you.

EPSS puts the chance of exploitation in the next 30 days at 0.90%, higher than 59% of scored CVEs.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for Philips Vue PACS

Exploited in the last 30 days

Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interception and/or retrieval.

CVSS: 3.7 LOW (v3.1, CNA)CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Weakness (CWE): CWE-522
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): 0.90% (percentile 59)
Assigned by: icscert
NVD analysis: Modified
Record last updated: Apr 16, 2025
First seen by InfoSec Signals: Oct 12, 2026

Affected products

Affected products

Philips Vue PACS philips:vue_pacs (from the name)	from unspecified through 12.2.x.x	CNA record
Philips Vue MyVue philips:vue_myvue (from the name)	from unspecified through 12.2.x.x	CNA record
Philips Vue Speech philips:vue_speech (from the name)	from unspecified through 12.2.x.x	CNA record
Philips Vue Motion philips:vue_motion (from the name)	from unspecified through 12.2.1.5	CNA record
philips myvue philips:myvue	before 12.2.1.5	NVD
philips speech philips:speech	before 12.2.8.0	NVD
philips vue_motion philips:vue_motion	before 12.2.1.5	NVD
philips vue_pacs philips:vue_pacs	before 12.2.8.0	NVD

References

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-187-01	x-refsource-confirm, mitigation, third-party-advisory, us-government-resource
http://www.philips.com/productsecurity	x-refsource-confirm, vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.