CVE-2021-27456

{"id": "CVE-2021-27456", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 2.1, "accessVector": "LOCAL", "vectorString": "AV:L/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 3.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.4, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 0.9}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 2.4, "attackVector": "PHYSICAL", "baseSeverity": "LOW", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 0.9}]}, "published": "2022-03-23T20:15:08.643", "references": [{"url": "https://www.cisa.gov/uscert/ics/advisories/icsma-21-084-01", "tags": ["Third Party Advisory", "US Government Resource"], "source": "ics-cert@hq.dhs.gov"}, {"url": "https://www.philips.com/productsecurity", "tags": ["Product"], "source": "ics-cert@hq.dhs.gov"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-922"}]}, {"type": "Secondary", "source": "ics-cert@hq.dhs.gov", "description": [{"lang": "en", "value": "CWE-921"}]}], "descriptions": [{"lang": "en", "value": "Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control."}, {"lang": "es", "value": "El software de la familia Philips Gemini PET/CT, almacena informaci\u00f3n confidencial en un dispositivo de medios extra\u00edbles que no presenta un control de acceso incorporado"}], "lastModified": "2022-04-12T18:09:11.980", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882300_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B0D53F26-1CDB-4285-B8B2-19FF9A99696F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882300:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "E8309DAF-F77E-4000-934B-D88E3CA9F970"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882160_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B1AFEDFD-164C-4A6E-A7C4-5102C4F7F9BD"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882160:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8F56BAAE-C4EC-4D35-8389-17BD371FB148"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882400_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "03D6F895-4605-41AD-A070-DE2153140F2B"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882400:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "82EB90AC-1294-4F45-9E06-C8BDE1799891"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882390_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "CB6CBF1A-F22F-4EF2-85BD-EF3F7B0630C2"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882390:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "D43E2A9C-50C3-4D0C-86A5-A2A85CC1471D"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882410_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6BFD9549-CEF4-4660-B25D-8B75E45F0647"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882410:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "6A760D18-A531-4B7A-8761-8CD176D634E5"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882412_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "368682F9-3DF2-43EC-A11E-303AF266B17A"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882412:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "5F386C1D-2BDD-42E2-9518-121EF5EA9C52"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882473_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "0FA98781-6CC4-4536-8169-FAC7A8DAC32F"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882473:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "8F99A833-9F49-4A41-AD1E-7CBF8B86D721"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882470_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B6DF5584-736E-460A-924B-3B9DEF4D3557"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882470:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "ECEBE228-C5CE-4BE7-9784-4D9535999764"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882471_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "66CF4FC6-336F-43BA-8584-AB1FC4A9D885"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882471:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "999C9C95-83F8-4A4D-86DB-6FBA7C07AD4E"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:gemini_882476_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "38EF38D4-235F-4195-9BFA-21174EDDB0AB"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:gemini_882476:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "56F74A78-104B-4580-94F8-A86F1877055F"}], "operator": "OR"}], "operator": "AND"}, {"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:phillips:truflight_882438_firmware:-:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "43E14D7B-34E8-46FB-9D86-E92F6F7DD7D9"}], "operator": "OR"}, {"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:h:phillips:truflight_882438:-:*:*:*:*:*:*:*", "vulnerable": false, "matchCriteriaId": "4F3B93D1-9A74-4F75-934A-48013D9BCBEA"}], "operator": "OR"}], "operator": "AND"}], "sourceIdentifier": "ics-cert@hq.dhs.gov"}