What’s Vulnerable › Vulnerabilities

CVE-2021-27456: Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control

• Severity: low (CVSS 2.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-03-23 · updated 2026-06-17
• Weakness: CWE-921

Description

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.

Affected products

• Phillips Gemini 882160 Firmware: all versions
• Phillips Gemini 882300 Firmware: all versions
• Phillips Gemini 882390 Firmware: all versions
• Phillips Gemini 882400 Firmware: all versions
• Phillips Gemini 882410 Firmware: all versions
• Phillips Gemini 882412 Firmware: all versions
• Phillips Gemini 882470 Firmware: all versions
• Phillips Gemini 882471 Firmware: all versions
• Phillips Gemini 882473 Firmware: all versions
• Phillips Gemini 882476 Firmware: all versions
• Phillips Truflight 882438 Firmware: all versions

References

• https://www.cisa.gov/uscert/ics/advisories/icsma-21-084-01
• https://www.philips.com/productsecurity
• https://www.cisa.gov/uscert/ics/advisories/icsma-21-084-01
• https://www.philips.com/productsecurity

Get alerted when CVE-2021-27456 or the next vulnerability affects your stack