# CVE-2021-27456

## Summary

- **CVE ID:** CVE-2021-27456
- **Severity:** LOW
- **CVSS Score:** 2.4 (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
- **CWE:** CWE-921
- **Published:** Mar 23, 2022
- **Last Modified:** Mar 13, 2026

## Description

Philips Gemini PET/CT family software stores sensitive information in a removable media device that does not have built-in access control.

## Affected Products

- Philips — Gemini 16 Slice (882300)
- Philips — Gemini Dual (882160)
- Philips — Gemini GXL 10 Slice (882400)
- Philips — Gemini GXL 6 Slice (882390)
- Philips — Gemini GXL 16 Slice (882410)
- Philips — GEMINI LXL (882412)
- Philips — Gemini TF Ready (882473)
- Philips — Gemini TF 16 w/ TOF Performance (882470)
- Philips — Gemini TF 64 w/ TOF Performance (882471)
- Philips — Gemini TF Big Bore (882476)
- Philips — TruFlight Select PET/CT (882438)

## References

- [CNA](https://www.cisa.gov/uscert/ics/advisories/icsma-21-084-01)
- [CNA](https://www.philips.com/productsecurity)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.08%
- **EPSS Percentile:** 24.1

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._