H-ISAC TLP White Finished Intelligence Report: HC3 Sector Alert Phillips Vue Pacs Vulnerabilities

July 9, 2021

The Philips Vue PACS (Picture Archiving and Communication System) is an image-management software platform that enables hospitals to archive, distribute, display and retrieve images and data from all hospital modalities and information systems. Vulnerabilities have been identified in Philips Vue PACS products which include 5 classified as critical that allow for a number of negative impacts including disruption, data theft and total device compromise. HC3 recommends that any healthcare organization that may operate Philips Vue PACS systems immediately confirm their inventory and review the list of recommended mitigations in this document. For additional details, please download the report below. 

For help with Cybersecurity and Risk Advisory Services exclusively for AHA members, contact:

John Riggi

Senior Advisor for Cybersecurity and Risk, AHA

jriggi@aha.org

(O) +1 202 626 2272