LIVE FEED

A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.

Vulnerability

Philips lists IntelliSpace PACS and UDM 2 under F5 BIG-IP flaw CVE-2023-46747

MedDevice Cyber Staff · Nov 23 · 2 min read · Via Philips product security advisories, 2023 archive

Philips published an advisory on November 23, 2023, for CVE-2023-46747, an unauthenticated remote code execution vulnerability in the BIG-IP Configuration utility. IntelliSpace PACS and Universal Data Manager 2 (UDM) are the listed products.

Philips split its mitigations by product type, beginning with software-only products with customer-owned operating systems. The Configuration utility is the BIG-IP admin web interface, and unauthenticated code execution there hands an attacker the appliance sitting in front of the archive.

Are you a representative of Philips? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

Apply F5's fix for CVE-2023-46747 to the BIG-IP appliances serving IntelliSpace PACS and UDM 2, following Philips mitigations for your product type. Keep the Configuration utility off any network clinical users can reach.

Patch BIG-IP. Apply F5's CVE-2023-46747 fix on appliances in front of IntelliSpace PACS and UDM 2.
Hide the Configuration utility. Restrict the BIG-IP admin interface to a management network.
Follow Philips mitigations. Apply the Philips guidance for software-only installs on customer-owned operating systems.
Hunt for compromise. Review BIG-IP for unknown admin accounts created before patching.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure.

Required

Off-the-shelf software

Contributing

Web interface

Fix the class in your product

The advisory is not for a bug you wrote; it is in a component you embed. As the maker, pin dependencies to fixed versions, generate an SBOM on every build including transitive components, and gate the pipeline on known-vulnerable components so an advisory maps to your products automatically.

Pin and inventory. Exact versions, and a CycloneDX or SPDX SBOM as a build artifact including transitive deps.
Gate on advisories. A CI scan fails a release carrying a component with a known advisory.
Own the field patch path. Know how you deliver a dependency or platform patch to fielded devices before you need it.

Mapped EMB3D mitigations

Questions & Answers

Is IntelliSpace PACS affected by CVE-2023-46747?

Philips listed IntelliSpace PACS and Universal Data Manager 2 on November 23, 2023, as related to CVE-2023-46747, an unauthenticated remote code execution vulnerability in the F5 BIG-IP Configuration utility.

What is CVE-2023-46747 in F5 BIG-IP?

CVE-2023-46747 is an unauthenticated remote code execution vulnerability in the BIG-IP Configuration utility. Philips named IntelliSpace PACS and UDM 2 as related products on November 23, 2023.

← Back to Vulnerabilities