Philips
101 CVEs across 221 Philips products. Browse Philips vulnerabilities, severities, and proof-of-concept exploits.
Philips products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-3562 | High | 8.8 | 2026-03-16 | Philips Hue Bridge hk_hap Ed25519 Signature Verification Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to execute a… |
CVE-2026-3561 | High | 8.0 | 2026-03-16 | Philips Hue Bridge hk_hap characteristics Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2026-3560 | High | 8.8 | 2026-03-16 | Philips Hue Bridge HomeKit hk_hap_pair_storage_put Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent a… |
CVE-2026-3559 | High | 8.1 | 2026-03-16 | Philips Hue Bridge HomeKit Accessory Protocol Static Nonce Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers to bypass… |
CVE-2026-3558 | High | 8.1 | 2026-03-16 | Philips Hue Bridge HomeKit Accessory Protocol Transient Pairing Mode Authentication Bypass Vulnerability. This vulnerability allows network-adjacent attackers… |
CVE-2026-3557 | High | 8.0 | 2026-03-16 | Philips Hue Bridge hap_pair_verify_handler Sub-TLV Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-ad… |
CVE-2026-3556 | High | 8.8 | 2026-03-16 | Philips Hue Bridge HomeKit Pair-Setup Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to e… |
CVE-2026-3555 | High | 8.0 | 2026-03-16 | Philips Hue Bridge Zigbee Stack Custom Command Handler Heap-based Buffer Overflow Remote Code Execution Vulnerability. This vulnerability allows network-adjace… |
CVE-2025-27955 | Medium | 6.5 | 2025-06-02 | Clinical Collaboration Platform 12.2.1.5 has a weak logout system where the session token remains valid after logout and allows a remote attacker to obtain sen… |
CVE-2025-27954 | Medium | 6.5 | 2025-06-02 | An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the usertoken func… |
CVE-2025-27953 | Medium | 6.5 | 2025-06-02 | An issue in Clinical Collaboration Platform 12.2.1.5 allows a remote attacker to obtain sensitive information and execute arbitrary code via the session manage… |
CVE-2025-3426 | | 2025-04-07 | We observed that Intellispace Portal binaries doesn’t have any protection mechanisms to prevent reverse engineering. Specifically, the app’s code is not obfusc… | |
CVE-2025-3425 | | 2025-04-07 | The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the deseri… | |
CVE-2025-3424 | | 2025-04-07 | The IntelliSpace portal application utilizes .NET Remoting for its functionality. The vulnerability arises from the exploitation of port 755 through the "Objec… | |
CVE-2025-2230 | High | 7.7 | 2025-03-13 | A flaw exists in the Windows login flow where an AuthContext token can be exploited for replay attacks and authentication bypass. |
CVE-2025-2229 | High | 7.7 | 2025-03-13 | A token is created using the username, current date/time, and a fixed AES-128 encryption key, which is the same across all installations. |
CVE-2023-40704 | Medium | 6.8 | 2024-07-18 | The product does not require unique and complex passwords to be created during installation. Using Philips's default password could jeopardize the PACS syste… |
CVE-2018-8863 | Medium | 5.9 | 2023-11-09 | The HTTP header in Philips EncoreAnywhere contains data an attacker may be able to use to gain sensitive information. |
CVE-2021-39369 | Medium | 6.5 | 2022-12-26 | In Philips (formerly Carestream) Vue MyVue PACS through 12.2.x.x, the VideoStream function allows Path Traversal by authenticated users to access files stored… |
CVE-2021-32966 | Low | 3.7 | 2022-05-25 | Philips Interoperability Solution XDS versions 2.5 through 3.11 and 2018-1 through 2021-1 are vulnerable to clear text transmission of sensitive information wh… |
CVE-2022-0922 | Medium | 6.5 | 2022-04-01 | The software does not perform any authentication for critical system functionality. |
CVE-2021-33024 | Low | 3.7 | 2022-04-01 | Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interce… |
CVE-2021-33022 | High | 7.5 | 2022-04-01 | Philips Vue PACS versions 12.2.x.x and prior transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unaut… |
CVE-2021-33020 | High | 8.2 | 2022-04-01 | Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increa… |
CVE-2021-33018 | High | 7.5 | 2022-04-01 | The use of a broken or risky cryptographic algorithm in Philips Vue PACS versions 12.2.x.x and prior is an unnecessary risk that may result in the exposure of… |
CVE-2021-27501 | High | 7.5 | 2022-04-01 | Philips Vue PACS versions 12.2.x.x and prior does not follow certain coding rules for development, which can lead to resultant weaknesses or increase the sever… |
CVE-2021-27497 | Medium | 6.5 | 2022-04-01 | Philips Vue PACS versions 12.2.x.x and prior does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks… |
CVE-2021-27493 | Medium | 6.1 | 2022-04-01 | Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security prope… |
CVE-2021-27456 | Low | 2.4 | 2022-03-23 | Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control. |
CVE-2021-23173 | Low | 2.6 | 2022-01-10 | The affected product is vulnerable to an improper access control, which may allow an authenticated user to gain unauthorized access to sensitive data. |
CVE-2021-43552 | Medium | 6.1 | 2021-12-27 | The use of a hard-coded cryptographic key significantly increases the possibility encrypted data may be recovered from the Patient Information Center iX (PIC i… |
CVE-2021-43550 | Medium | 5.9 | 2021-12-27 | The use of a broken or risky cryptographic algorithm is an unnecessary risk that may result in the exposure of sensitive information, which affects the communi… |
CVE-2021-43548 | Medium | 6.5 | 2021-12-27 | Patient Information Center iX (PIC iX) Versions C.02 and C.03 receives input or data, but does not validate or incorrectly validates that the input has the pro… |
CVE-2021-33017 | High | 8.1 | 2021-12-27 | The standard access path of the IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) requires authentication, but the product has an alternate path or channel th… |
CVE-2021-32993 | High | 8.1 | 2021-12-27 | IntelliBridge EC 40 and 60 Hub (C.00.04 and prior) contains hard-coded credentials, such as a password or a cryptographic key, which it uses for its own inboun… |
CVE-2021-42744 | Medium | 5.5 | 2021-11-19 | Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
CVE-2021-26262 | Medium | 5.5 | 2021-11-19 | Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
CVE-2021-26248 | Medium | 5.5 | 2021-11-19 | Philips MRI 1.5T and MRI 3T Version 5.3 through 5.8.1 does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
CVE-2021-39376 | High | 8.8 | 2021-08-24 | Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSIST or CD_USUARIO_CON… |
CVE-2021-39375 | High | 8.8 | 2021-08-24 | Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the WAdvancedFilter/getDimensionItemsByCode FilterValue parameter. |
CVE-2020-27298 | Medium | 6.5 | 2021-01-26 | Philips Interventional Workspot (Release 1.3.2, 1.4.0, 1.4.1, 1.4.3, 1.4.5), Coronary Tools/Dynamic Coronary Roadmap/Stentboost Live (Release 1.0), ViewForum (… |
CVE-2018-7580 | High | 7.5 | 2020-12-21 | Philips Hue is vulnerable to a Denial of Service attack. Sending a SYN flood on port tcp/80 will freeze Philips Hue's hub and it will stop responding. The "hub… |
CVE-2020-16247 | Medium | 6.8 | 2020-09-18 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, exposes a resource to the wrong control sphere, providing unintended actors with inappro… |
CVE-2020-16200 | Medium | 6.5 | 2020-09-18 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not properly control the allocation and maintenance of a limited resource, thereby… |
CVE-2020-16198 | Medium | 5.0 | 2020-09-18 | When an attacker claims to have a given identity, Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not prove or insufficiently prove… |
CVE-2020-14525 | Low | 3.5 | 2020-09-18 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior, does not neutralize or incorrectly neutralizes user-controllable input before it is placed… |
CVE-2020-14506 | Low | 3.4 | 2020-09-18 | Philips Clinical Collaboration Platform, Versions 12.2.1 and prior. The product receives input or data, but it does not validate or incorrectly validates that… |
CVE-2020-16224 | Medium | 6.5 | 2020-09-11 | In Patient Information Center iX (PICiX) Versions C.02, C.03, the software parses a formatted message or structure but does not handle or incorrectly handles… |
CVE-2020-16220 | Medium | 4.3 | 2020-09-11 | In Patient Information Center iX (PICiX) Versions C.02, C.03, PerformanceBridge Focal Point Version A.01, the product receives input that is expected to be w… |
CVE-2020-16216 | Medium | 6.5 | 2020-09-11 | In IntelliVue patient monitors MX100, MX400-550, MX600, MX700, MX750, MX800, MX850, MP2-MP90, and IntelliVue X2 and X3 Versions N and prior, the product rece… |
CVE-2020-16212 | Medium | 6.8 | 2020-09-11 | In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the product exposes a resource to the wrong control sphere, providing unintended actors wit… |
CVE-2020-16228 | Medium | 6.4 | 2020-09-11 | In Patient Information Center iX (PICiX) Versions C.02 and C.03, PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors MX100, MX400-MX550… |
CVE-2020-16222 | High | 8.8 | 2020-09-11 | In Patient Information Center iX (PICiX) Version B.02, C.02, C.03, and PerformanceBridge Focal Point Version A.01, when an actor claims to have a given ident… |
CVE-2020-16218 | Low | 3.5 | 2020-09-11 | In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software does not neutralize or incorrectly neutralizes user-controllable input befor… |
CVE-2020-16214 | Medium | 5.0 | 2020-09-11 | In Patient Information Center iX (PICiX) Versions B.02, C.02, C.03, the software saves user-provided information into a comma-separated value (CSV) file, but… |
CVE-2020-11618 | High | 7.8 | 2020-08-31 | THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes have their TELNET service hardcoded to start on boot, which allows an attacker on th… |
CVE-2020-11617 | Medium | 5.9 | 2020-08-31 | The RSS application on THOMSON THT741FTA 2.2.1 and Philips DTR3502BFTA DVB-T2 2.2.1 set-top boxes doesn't validate the SSL certificates of RSS servers, which a… |
CVE-2020-16241 | Medium | 6.3 | 2020-08-21 | Philips SureSigns VS4, A.07.107 and prior does not restrict or incorrectly restricts access to a resource from an unauthorized actor. |
CVE-2020-16239 | Medium | 4.9 | 2020-08-21 | When an actor claims to have a given identity, Philips SureSigns VS4, A.07.107 and prior does not prove or insufficiently proves the claim is correct. |
CVE-2020-16237 | Low | 2.1 | 2020-08-21 | Philips SureSigns VS4, A.07.107 and prior receives input or data, but it does not validate or incorrectly validates that the input has the properties required… |
CVE-2020-14518 | Medium | 5.3 | 2020-08-21 | Philips DreamMapper, Version 2.24 and prior. Information written to log files can give guidance to a potential attacker. |
CVE-2020-7360 | High | 7.4 | 2020-08-13 | An Uncontrolled Search Path Element (CWE-427) vulnerability in SmartControl version 4.3.15 and versions released before April 15, 2020 may allow an authenticat… |
CVE-2020-14477 | Low | 3.6 | 2020-06-26 | In Philips Ultrasound ClearVue Versions 3.2 and prior, Ultrasound CX Versions 5.0.2 and prior, Ultrasound EPIQ/Affiniti Versions VM5.0 and prior, Ultrasound Sp… |
CVE-2020-12023 | Low | 2.0 | 2020-06-11 | Philips IntelliBridge Enterprise (IBE), Versions B.12 and prior, IntelliBridge Enterprise system integration with SureSigns (VS4), EarlyVue (VS30) and IntelliV… |
CVE-2020-6007 | High | 7.9 | 2020-01-23 | Philips Hue Bridge model 2.X prior to and including version 1935144020 contains a Heap-based Buffer Overflow when handling a long ZCL string during the commiss… |
CVE-2019-18263 | Medium | 6.5 | 2019-12-20 | An issue was found in Philips Veradius Unity, Pulsera, and Endura Dual WAN Router, Veradius Unity (718132) with wireless option (shipped between 2016-August 20… |
CVE-2019-18241 | Medium | 6.5 | 2019-11-26 | In Philips IntelliBridge EC40 and EC80, IntelliBridge EC40 Hub all versions, and IntelliBridge EC80 Hub all versions, the SSH server running on the affected pr… |
CVE-2019-18980 | High | 7.5 | 2019-11-14 | On Signify Philips Taolight Smart Wi-Fi Wiz Connected LED Bulb 9290022656 devices, an unprotected API lets remote users control the bulb's operation. Anyone ca… |
CVE-2019-13557 | Medium | 5.3 | 2019-11-08 | In Tasy EMR, Tasy WebPortal Versions 3.02.1757 and prior, there is an information exposure vulnerability which may allow a remote attacker to access system and… |
CVE-2019-13546 | Medium | 6.8 | 2019-10-25 | In IntelliSpace Perinatal, Versions K and prior, a vulnerability within the IntelliSpace Perinatal application environment could enable an unauthorized attacke… |
CVE-2019-13534 | High | 7.2 | 2019-09-12 | Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part #: M8096-67501, WLAN Version B, Fi… |
CVE-2019-13530 | High | 7.2 | 2019-09-12 | Philips IntelliVue WLAN, portable patient monitors, WLAN Version A, Firmware A.03.09, WLAN Version A, Firmware A.03.09, Part #: M8096-67501, WLAN Version B, Fi… |
CVE-2019-10988 | Low | 3.4 | 2019-09-04 | In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 Ultrasound System is buil… |
CVE-2019-10968 | Medium | 4.4 | 2019-07-24 | Philips Holter 2010 Plus, all versions. A vulnerability has been identified that may allow system options that were not purchased to be enabled. |
CVE-2019-6562 | Medium | 5.4 | 2019-05-01 | In Philips Tasy EMR, Tasy EMR Versions 3.02.1744 and prior, the software incorrectly neutralizes user-controllable input before it is placed in output that is… |
CVE-2018-19001 | Medium | 4.3 | 2018-12-07 | Philips HealthSuite Health Android App, all versions. The software uses simple encryption that is not strong enough for the level of protection required. |
CVE-2018-17906 | High | 8.8 | 2018-11-19 | Philips iSite and IntelliSpace PACS, iSite PACS, all versions, and IntelliSpace PACS, all versions. Default credentials and no authentication within third part… |
CVE-2018-8856 | Critical | 9.8 | 2018-09-26 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software contains hard-coded cryptographic key, which it uses for encryption of internal… |
CVE-2018-8854 | High | 7.5 | 2018-09-26 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influen… |
CVE-2018-8852 | High | 8.8 | 2018-09-26 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. When authenticating a user or otherwise establishing a new user session, the software gives… |
CVE-2018-8850 | Critical | 9.8 | 2018-09-26 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not validate input properly, allowing an attacker to craft the input in a… |
CVE-2018-8848 | High | 7.5 | 2018-09-26 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software, upon installation, sets incorrect permissions for an object that exposes it to… |
CVE-2018-8846 | Medium | 6.1 | 2018-09-26 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not neutralize or incorrectly neutralizes user-controllable input before i… |
CVE-2018-8844 | High | 8.8 | 2018-09-26 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The web application does not, or cannot, sufficiently verify whether a well-formed, valid, c… |
CVE-2018-8842 | High | 8.8 | 2018-09-26 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software transmits sensitive or security-critical data in cleartext in a communication c… |
CVE-2018-14803 | Medium | 5.3 | 2018-09-26 | Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The Philips e-Alert contains a banner disclosure vulnerability that could allow attackers to… |
CVE-2018-14801 | Medium | 6.2 | 2018-08-22 | In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, an attacker with both the superuser password and physical acce… |
CVE-2018-14799 | Low | 3.7 | 2018-08-22 | In Philips PageWriter TC10, TC20, TC30, TC50, TC70 Cardiographs, all versions prior to May 2018, the PageWriter device does not sanitize data entered by user… |
CVE-2018-14789 | Medium | 6.7 | 2018-08-22 | In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 3.1 or prior and Xcelera Version 4.1 or prior), an unquoted search path or element vulner… |
CVE-2018-14787 | High | 7.8 | 2018-08-22 | In Philips' IntelliSpace Cardiovascular (ISCV) products (ISCV Version 2.x or prior and Xcelera Version 4.1 or prior), an attacker with escalated privileges cou… |
CVE-2017-3210 | High | 7.8 | 2018-07-24 | Applications developed using the Portrait Display SDK, versions 2.30 through 2.34, default to insecure configurations which allow arbitrary code execution. A n… |
CVE-2018-10601 | High | 8.2 | 2018-06-05 | IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX10… |
CVE-2018-10599 | Medium | 5.3 | 2018-06-05 | IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX10… |
CVE-2018-10597 | High | 8.3 | 2018-06-05 | IntelliVue Patient Monitors MP Series (including MP2/X2/MP30/MP50/MP70/NP90/MX700/800) Rev B-M, IntelliVue Patient Monitors MX (MX400-550) Rev J-M and (X3/MX10… |
CVE-2018-8861 | High | 8.7 | 2018-05-04 | Vulnerabilities within the Philips Brilliance CT kiosk environment (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance i… |
CVE-2018-8857 | High | 7.8 | 2018-05-04 | Philips Brilliance CT software (Brilliance 64 version 2.6.2 and prior, Brilliance iCT versions 4.1.6 and prior, Brillance iCT SP versions 3.2.4 and prior, and… |
CVE-2018-8853 | High | 8.8 | 2018-05-04 | Philips Brilliance CT devices operate user functions from within a contained kiosk in a Microsoft Windows operating system. Windows boots by default with eleva… |
CVE-2017-9658 | Medium | 6.5 | 2018-04-30 | Certain 802.11 network management messages have been determined to invoke wireless access point blacklisting security defenses when not required, which can nec… |
CVE-2017-9657 | Medium | 6.5 | 2018-04-30 | Under specific 802.11 network conditions, a partial re-association of the Philips IntelliVue MX40 Version B.06.18 WLAN monitor to the central monitoring statio… |
CVE-2017-9656 | Critical | 9.1 | 2018-04-24 | The backend database of the Philips DoseWise Portal application versions 1.1.7.333 and 2.1.1.3069 uses hard-coded credentials for a database account with privi… |