Philips Vue PACS Cryptographic Key Expiration Vulnerability

A vulnerability exists in Philips Vue PACS, Vue MyVue, Vue Speech, and Vue Motion versions through 12.2.x.x, allowing the use of cryptographic keys or passwords past their expiration date. This flaw increases the risk of cracking attacks by extending the time window during which keys can be compromised.

Impact

Exploitation of this vulnerability could allow unauthorized individuals to crack cryptographic keys, potentially leading to unauthorized access or manipulation of data.

Remediation

Philips has released version 12.2.8.100 in Q1 2022 for PACS that addresses this vulnerability. Users should contact Philips support for assistance with the update.