[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fxnRx-x3_J0kKL-xTXt8XY5bSsknsRxfuDiZiuSoUNAg":3,"g5a-risk:CVE-2023-40704":126},{"success":4,"data":5,"meta":123},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":49,"epssPercentile":29,"epssTimeSeries":50,"severity":51,"affectedProducts":52,"affectedProductsCount":58,"references":59,"referencesCount":75,"weaknesses":76,"weaknessesCount":58,"isActivelyExploited":85,"cisaInfo":29,"otxData":29,"relatedBlogPosts":86,"seoMetadata":87,"configurations":112,"relatedVendorCves":121,"notableEvents":122},"CVE-2023-40704","What is CVE-2023-40704?","The product does not require unique and complex passwords to be created \nduring installation. Using Philips's default password could jeopardize \nthe PACS system if the password was hacked or leaked. An attacker could \ngain access to the database impacting system availability and data \nintegrity.","The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS syste...","2024-07-18T17:15:03.897","2026-06-17T06:19:09.137",5.7,"CVSS:4.0\u002FAV:L\u002FAC:H\u002FAT:N\u002FPR:H\u002FUI:N\u002FVC:H\u002FVI:L\u002FVA:H\u002FSC:N\u002FSI:N\u002FSA:N\u002FE:X\u002FCR:X\u002FIR:X\u002FAR:X\u002FMAV:X\u002FMAC:X\u002FMAT:X\u002FMPR:X\u002FMUI:X\u002FMVC:X\u002FMVI:X\u002FMVA:X\u002FMSC:X\u002FMSI:X\u002FMSA:X\u002FS:X\u002FAU:X\u002FR:X\u002FV:X\u002FRE:X\u002FU:X",{"CVSSMetricV31":15,"CVSSMetricV30":41,"CVSSMetricV2":42,"CVSSMetricV40":43},[16,32],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":30,"ImpactScore":31},"ics-cert@hq.dhs.gov","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":27,"BaseSeverity":28,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"3.1","CVSS:3.1\u002FAV:A\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","ADJACENT_NETWORK","LOW","HIGH","NONE","UNCHANGED",6.8,"MEDIUM",null,0.9,5.9,{"Source":33,"Type":34,"CVSSData":35,"ExploitabilityScore":40,"ImpactScore":31},"nvd@nist.gov","Primary",{"Version":20,"VectorString":36,"AttackVector":37,"AttackComplexity":23,"PrivilegesRequired":25,"UserInteraction":25,"Scope":26,"ConfidentialityImpact":24,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":38,"BaseSeverity":39,"ExploitCodeMaturity":29,"RemediationLevel":29,"ReportConfidence":29,"TemporalScore":29,"TemporalSeverity":29,"ConfidentialityRequirement":29,"IntegrityRequirement":29,"AvailabilityRequirement":29,"ModifiedAttackVector":29,"ModifiedAttackComplexity":29,"ModifiedPrivilegesRequired":29,"ModifiedUserInteraction":29,"ModifiedScope":29,"ModifiedConfidentialityImpact":29,"ModifiedIntegrityImpact":29,"ModifiedAvailabilityImpact":29,"EnvironmentalScore":29,"EnvironmentalSeverity":29},"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H","NETWORK",9.8,"CRITICAL",3.9,[],[],[44],{"Source":17,"Type":18,"CVSSData":45},{"Version":46,"VectorString":13,"BaseScore":12,"BaseSeverity":28,"AttackVector":47,"AttackComplexity":24,"AttackRequirements":25,"PrivilegesRequired":24,"UserInteraction":25,"VulnConfidentialityImpact":24,"VulnIntegrityImpact":23,"VulnAvailabilityImpact":24,"SubConfidentialityImpact":25,"SubIntegrityImpact":25,"SubAvailabilityImpact":25,"ExploitMaturity":48,"ConfidentialityRequirement":48,"IntegrityRequirement":48,"AvailabilityRequirement":48,"ModifiedAttackVector":48,"ModifiedAttackComplexity":48,"ModifiedAttackRequirements":48,"ModifiedPrivilegesRequired":48,"ModifiedUserInteraction":48,"ModifiedVulnConfidentialityImpact":48,"ModifiedVulnIntegrityImpact":48,"ModifiedVulnAvailabilityImpact":48,"ModifiedSubConfidentialityImpact":48,"ModifiedSubIntegrityImpact":48,"ModifiedSubAvailabilityImpact":48,"Safety":48,"Automatable":48,"Recovery":48,"ValueDensity":48,"VulnerabilityResponseEffort":48,"ProviderUrgency":48},"4.0","LOCAL","NOT_DEFINED",0.00338,[49,49,49,49,49,49,49],"Medium",[53],{"vendor":54,"product":55,"version":56,"criteria":57,"vulnerable":4},"philips","vue_pacs","*","cpe:2.3:a:philips:vue_pacs:*:*:*:*:*:*:*:*",1,[60,65,71,73],{"url":61,"source":62,"tags":63},"http:\u002F\u002Fwww.philips.com\u002Fproductsecurity","Philips",[64],"Product",{"url":66,"source":67,"tags":68},"https:\u002F\u002Fwww.cisa.gov\u002Fnews-events\u002Fics-medical-advisories\u002Ficsma-24-200-01","CISA",[69,70],"Third Party Advisory","US Government Resource",{"url":61,"source":62,"tags":72},[64],{"url":66,"source":67,"tags":74},[69,70],4,[77],{"id":78,"name":79,"description":80,"extendedDescription":81,"status":82,"abstraction":83,"structure":84},"CWE-1392","Use of Default Credentials","The product uses default credentials (such as passwords or cryptographic keys) for potentially critical functionality.","It is common practice for products to be designed to use\n\tdefault keys, passwords, or other mechanisms for\n\tauthentication.  The rationale is to simplify the\n\tmanufacturing process or the system administrator's task of\n\tinstallation and deployment into an enterprise. However, if\n\tadmins do not change the defaults, it is easier for attackers\n\tto bypass authentication quickly across multiple\n\torganizations.","Incomplete","Base","Simple",false,[],{"title":88,"metaDescription":89,"keywords":90,"canonicalUrl":91,"structuredData":92},"What is CVE-2023-40704? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2023-40704, a medium severity cyber security vulnerability from 2024. The product does not require unique and complex passwords...","CVE-2023-40704, CVE-2023-40704 vulnerability, CVE-2023-40704 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2024, CVSS score, exploit, patch, remediation, philips security, vue_pacs vulnerability","\u002Fwhat-is\u002Fcve-2023-40704",{"@context":93,"@type":94,"headline":88,"description":89,"datePublished":10,"dateModified":11,"author":95,"publisher":99,"about":103,"mainEntityOfPage":107,"articleSection":110,"keywords":111},"https:\u002F\u002Fschema.org","TechArticle",{"@type":96,"name":97,"url":98},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":96,"name":97,"url":98,"logo":100},{"@type":101,"url":102},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":104,"name":6,"description":105,"additionalType":106},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":108,"@id":109},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2023-40704","Cybersecurity","CVE-2023-40704, CVE-2023-40704 vulnerability, CVE-2023-40704 security, medium severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[113],{"Operator":29,"Negate":29,"Nodes":114},[115],{"Operator":116,"Negate":85,"CPEMatch":117},"OR",[118],{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":119,"VersionStartExcluding":29,"VersionStartIncluding":29,"VersionEndExcluding":120,"VersionEndIncluding":29},"E3D16037-0684-4486-80A7-8EE98DD4E851","12.2.8.410",[],[],{"lastModified":11,"cacheTime":124,"version":125},1792362028123,"2.0",{"score":127,"band":51,"action":128,"scoredAt":129},54,"Plan remediation","2026-10-16T07:03:11.396411+00:00"]