SQL injection in Philips IntelliSpace PACS

Summary

The query interface in IntelliSpace PACS does not properly parameterize study identifier inputs, allowing SQL injection.

Affected versions

• IntelliSpace PACS 4.4 SP3 and earlier

Impact

Authenticated users can read arbitrary content from the imaging database, including studies belonging to other departments. Privilege escalation may be possible depending on stored procedure configuration.

Mitigation

Apply Philips service pack 4.4 SP4 or later.

References

• Philips Product Security Status Information
• ICS-CERT advisory pending

-- EOF --