CVE-2021-33024: Philips Myvue

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Philips Vue PACS versions 12.2.x.x and prior transmits or stores authentication credentials, but it uses an insecure method susceptible to unauthorized interception and/or retrieval.

Affected products

• Philips Myvue: before 12.2.1.5 (fixed in 12.2.1.5)
• Philips Speech: before 12.2.8.0 (fixed in 12.2.8.0)
• Philips Vue Motion: before 12.2.1.5 (fixed in 12.2.1.5)
• Philips Vue Pacs: before 12.2.8.0 (fixed in 12.2.8.0)

Published 2022-04-01. Last modified 2026-06-17.