VULNERABILITY INTELLIGENCE

CVE-2023-40704

CVSS score5.7 MEDIUM
EPSS probability0.34%
CISA KEVNot currently listed
Published2024-07-18
Last modified2026-06-17
CVSS vectorCVSS:4.0/AV:L/AC:H/AT:N/PR:H/UI:N/VC:H/VI:L/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Description

The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS system if the password was hacked or leaked. An attacker could gain access to the database impacting system availability and data integrity.

Weakness classification

  • CWE-1392: Use of Default Credentials

Primary references