Back to Database
Status published
Low
CVE-2021-27456
Philips Gemini PET/CT Storage of Sensitive Data in a Mechanism Without Access Control
Vulnerability Description
Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2021-27456
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Jean GEORGE – CHU UCL Namur – Nuclear medicine department reported this vulnerability to Philips.
References
More from Philips
View All →CVE-2025-3426
Use of default hardcoded credentials
High
7.2
CVE-2025-3425
Unauthenticated Remote Code Execution via .NET Deserialization
High
7.3
CVE-2025-3424
3.2.1 Arbitrary File Read in insecure .NET Remoting TCP Channel
High
7.7
CVE-2025-2230
Philips Intellispace Cardiovascular (ISCV) Improper Authentication
High
8.5
CVE-2025-2229
Philips Intellispace Cardiovascular (ISCV) Use of Weak Credentials
High
8.5
Affected Vendor
Philips
View all reports →Affected Software
Gemini 16 Slice, Gemini Dual, Gemini GXL 10 Slice, Gemini GXL 6 Slice, Gemini GXL 16 Slice, GEMINI LXL, Gemini TF Ready, Gemini TF 16 w/ TOF Performance, Gemini TF 64 w/ TOF Performance, Gemini TF Big Bore, TruFlight Select PET/CT
Vulnerable Versions:
882300, 882160, 882400, 882390, 882410, 882412, 882473, 882470, 882471, 882476, 882438
Timeline
Official Publish:
March 23rd, 2022
Last Modified:
April 16th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses (CWE)
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.