LIVE FEED

A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.

Vulnerability

Philips flags IntelliSpace PACS under VMware vCenter advisory VMSA-2024-0019

MedDevice Cyber Staff · Sep 20 · 2 min read · Via Philips product security advisories 2024

Philips posted a notice on September 20, 2024 tracking VMware advisory VMSA-2024-0019. VMware confirmed two vulnerabilities, CVE-2024-38812 and CVE-2024-38813, in its vCenter Server and Cloud Foundation products. IntelliSpace PACS is the one Philips product on the list.

vCenter is the management plane for every virtual machine it controls. A PACS whose servers run under a compromised vCenter can be stopped, cloned or rolled back by whoever owns the console, so the fix belongs on the same priority list as the PACS itself.

Are you a representative of Philips? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Apply the VMware fixes for VMSA-2024-0019 to the vCenter that manages IntelliSpace PACS virtual machines, coordinating the maintenance window with Philips. Restrict vCenter access to a management network.

Find the vCenter. Identify which vCenter Server manages the IntelliSpace PACS virtual machines.
Patch vCenter. Apply the VMSA-2024-0019 fixes for CVE-2024-38812 and CVE-2024-38813.
Fence the management plane. Allow vCenter logins only from a dedicated administrator network.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure.

Required

Off-the-shelf software

Contributing

Hospital network Patient or study database

Fix the class in your product

The advisory is not for a bug you wrote; it is in a component you embed. As the maker, pin dependencies to fixed versions, generate an SBOM on every build including transitive components, and gate the pipeline on known-vulnerable components so an advisory maps to your products automatically.

Pin and inventory. Exact versions, and a CycloneDX or SPDX SBOM as a build artifact including transitive deps.
Gate on advisories. A CI scan fails a release carrying a component with a known advisory.
Own the field patch path. Know how you deliver a dependency or platform patch to fielded devices before you need it.

Mapped EMB3D mitigations

Questions & Answers

Is IntelliSpace PACS affected by VMSA-2024-0019?

Philips listed IntelliSpace PACS in a September 20, 2024 notice on VMware advisory VMSA-2024-0019, which covers CVE-2024-38812 and CVE-2024-38813 in vCenter Server and Cloud Foundation.

What products do CVE-2024-38812 and CVE-2024-38813 affect?

VMware confirmed CVE-2024-38812 and CVE-2024-38813 in vCenter Server and Cloud Foundation under VMSA-2024-0019. Philips named IntelliSpace PACS as a product that runs in that environment on September 20, 2024.

← Back to Vulnerabilities