CVE-2021-33020: Philips Myvue

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

Philips Vue PACS versions 12.2.x.x and prior uses a cryptographic key or password past its expiration date, which diminishes its safety significantly by increasing the timing window for cracking attacks against that key.

Affected products

• Philips Myvue: before 12.2.1.5 (fixed in 12.2.1.5)
• Philips Speech: before 12.2.8.0 (fixed in 12.2.8.0)
• Philips Vue Motion: before 12.2.1.5 (fixed in 12.2.1.5)
• Philips Vue Pacs: before 12.2.8.0 (fixed in 12.2.8.0)

Published 2022-04-01. Last modified 2026-06-17.