Siemens syngo Dynamics path traversal vulnerability

Siemens syngo Dynamics is a cardiovascular imaging and information solution from Siemens, a German company designed to be a centralized digital hub for complete cardiovascular services. Designed to be a centralized digital hub for complete cardiovascular services, Siemens syngo Dynamics is vulnerable to a path traversal vulnerability that stems from the use of a Web service hosted with improper write access controls, which could be exploited to list directories in any folder accessible to accounts assigned to a pool of Web applications.