[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fhm2u9nTeZXTxaDKhYby92AOTZh0AZfE4_-BmkBjQFxc":3,"g5a-risk:CVE-2021-27497":141},{"success":4,"data":5,"meta":139},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":48,"epssPercentile":29,"epssTimeSeries":49,"severity":50,"affectedProducts":51,"affectedProductsCount":66,"references":67,"referencesCount":66,"weaknesses":84,"weaknessesCount":93,"isActivelyExploited":94,"cisaInfo":29,"otxData":29,"relatedBlogPosts":95,"seoMetadata":96,"configurations":121,"relatedVendorCves":137,"notableEvents":138},"CVE-2021-27497","What is CVE-2021-27497?","Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attack...","2022-04-01T23:15:09.267","2025-04-17T16:15:23.113",9.8,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":29,"CVSSMetricV2":39,"CVSSMetricV40":29},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"ics-cert@hq.dhs.gov","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":26,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":24,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:L\u002FA:N","NETWORK","HIGH","NONE","UNCHANGED","LOW",6.5,"MEDIUM",null,2.2,4.2,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":37,"ImpactScore":38},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":26,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":36,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":23,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"CRITICAL",3.9,5.9,[40],{"Source":33,"Type":34,"CVSSData":41,"BaseSeverity":23,"ExploitabilityScore":46,"ImpactScore":47,"ACInsufInfo":29,"ObtainAllPrivilege":29,"ObtainUserPrivilege":29,"ObtainOtherPrivilege":29,"UserInteractionRequired":29},{"Version":42,"VectorString":43,"AccessVector":22,"AccessComplexity":26,"Authentication":24,"ConfidentialityImpact":44,"IntegrityImpact":44,"AvailabilityImpact":44,"BaseScore":45,"BaseSeverity":29,"Exploitability":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"CollateralDamagePotential":29,"TargetDistribution":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"EnvironmentalScore":29},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.00848,[48,48,48,48,48,48,48],"Critical",[52,57,60,63],{"vendor":53,"product":54,"version":55,"criteria":56,"vulnerable":4},"philips","myvue","*","cpe:2.3:a:philips:myvue:*:*:*:*:*:*:*:*",{"vendor":53,"product":58,"version":55,"criteria":59,"vulnerable":4},"speech","cpe:2.3:a:philips:speech:*:*:*:*:*:*:*:*",{"vendor":53,"product":61,"version":55,"criteria":62,"vulnerable":4},"vue_motion","cpe:2.3:a:philips:vue_motion:*:*:*:*:*:*:*:*",{"vendor":53,"product":64,"version":55,"criteria":65,"vulnerable":4},"vue_pacs","cpe:2.3:a:philips:vue_pacs:*:*:*:*:*:*:*:*",4,[68,73,80,82],{"url":69,"source":70,"tags":71},"http:\u002F\u002Fwww.philips.com\u002Fproductsecurity","Philips",[72],"Vendor Advisory",{"url":74,"source":75,"tags":76},"https:\u002F\u002Fwww.cisa.gov\u002Fuscert\u002Fics\u002Fadvisories\u002Ficsma-21-187-01","CISA",[77,78,79],"Mitigation","Third Party Advisory","US Government Resource",{"url":69,"source":70,"tags":81},[72],{"url":74,"source":75,"tags":83},[77,78,79],[85],{"id":86,"name":87,"description":88,"extendedDescription":89,"status":90,"abstraction":91,"structure":92},"CWE-693","Protection Mechanism Failure","The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.","This weakness covers three distinct situations. A \"missing\" protection mechanism occurs when the application does not define any mechanism against a certain class of attack. An \"insufficient\" protection mechanism might provide some defenses - for example, against the most common attacks - but it does not protect against everything that is intended. Finally, an \"ignored\" mechanism occurs when a mechanism is available and in active use within the product, but the developer has not applied it in some code path.","Draft","Pillar","Simple",1,false,[],{"title":97,"metaDescription":98,"keywords":99,"canonicalUrl":100,"structuredData":101},"What is CVE-2021-27497? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2021-27497, a critical severity cyber security vulnerability from 2022. Philips Vue PACS versions 12.2.x.x and prior does not u...","CVE-2021-27497, CVE-2021-27497 vulnerability, CVE-2021-27497 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, philips security, myvue vulnerability, speech vulnerability, vue_motion vulnerability, vue_pacs vulnerability","\u002Fwhat-is\u002Fcve-2021-27497",{"@context":102,"@type":103,"headline":97,"description":98,"datePublished":10,"dateModified":11,"author":104,"publisher":108,"about":112,"mainEntityOfPage":116,"articleSection":119,"keywords":120},"https:\u002F\u002Fschema.org","TechArticle",{"@type":105,"name":106,"url":107},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":105,"name":106,"url":107,"logo":109},{"@type":110,"url":111},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":113,"name":6,"description":114,"additionalType":115},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":117,"@id":118},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2021-27497","Cybersecurity","CVE-2021-27497, CVE-2021-27497 vulnerability, CVE-2021-27497 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[122],{"Operator":29,"Negate":29,"Nodes":123},[124],{"Operator":125,"Negate":29,"CPEMatch":126},"OR",[127,130,133,135],{"Vulnerable":4,"Criteria":56,"MatchCriteriaID":128,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":129,"VersionEndIncluding":29},"318C7D67-5A69-46FE-91D6-46D970BD04CC","12.2.1.5",{"Vulnerable":4,"Criteria":59,"MatchCriteriaID":131,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":132,"VersionEndIncluding":29},"4E491B68-B518-443D-95A5-56C14759C047","12.2.8.0",{"Vulnerable":4,"Criteria":62,"MatchCriteriaID":134,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":129,"VersionEndIncluding":29},"5DCDCF9C-D950-42E1-8827-76E12F3F280F",{"Vulnerable":4,"Criteria":65,"MatchCriteriaID":136,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":132,"VersionEndIncluding":29},"4DD47316-BA3D-4819-90F9-75B41292A154",[],[],{"lastModified":11,"cacheTime":140,"version":42},1792347497008,{"score":142,"band":143,"action":144,"scoredAt":145},54,"Medium","Plan remediation","2026-10-16T06:54:01.794021+00:00"]