cve.bz

CVE-2023-40704

5.7 mediumEPSS 0.3%

Medium (5.7) in philips vue pacs. EPSS 0.3% chance of exploitation in the next 30 days.

The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity.

Severity

CVSS 4.0

5.7 medium
CVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

9.8 critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.3% chance of exploitation in the next 30 days; higher than 27% of CVEs (scores of 2026-10-31)
CWE
CWE-1392
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON