Lucene search
+L

CVE-2025-1001

🗓️ 21 Feb 2025 00:48:52Reported by icscertType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 76 Views

Medixant RadiAnt DICOM Viewer has a vulnerability that may allow machine-in-the-middle attacks.

Related
Detection
Affected
Refs
Social
Vulners
[
  {
    "defaultStatus": "unaffected",
    "product": "RadiAnt DICOM Viewer",
    "vendor": "Medixant",
    "versions": [
      {
        "status": "affected",
        "version": "2024.02"
      }
    ]
  }
]

syedaquib77

Vulnerability Alert: Improper Certificate Validation in RadiAnt DICOM Viewer Timeline: Disclosure: April 25, 2024 Patch Released: July 24, 2024 Attribution: Not specified CVE ID: CVE-2025-1001 Base Score: 5.7 CVSS Metrics: AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N CVSS Severity: Medium Exploit Maturity: Not Available Affected Versions: RadiAnt DICOM Viewer version 2024.02 Fixed Versions: v2025.1 and later Summary:A vulnerability in Medixant's RadiAnt DICOM Viewer version 2024.02 involves improper certificate validation during the software update process. This flaw could allow attackers to perform man-in-the-middle (MITM) attacks, modifying server responses to deliver malicious updates to users. Target Profile:Users and organizations utilizing RadiAnt DICOM Viewer for medical imaging purposes. Impact Scope:Exploitation of this vulnerability could compromise system integrity by allowing unauthorized code execution through tampered software updates. Recommended Actions: Update Software: Upgrade to RadiAnt DICOM Viewer version 2025.1 or later to address the vulnerability. Implement Workarounds: If immediate updating is not feasible, consider disabling automatic update checks and manually verifying update integrity before installation. Related Resources: Japan Vulnerability Notes (JVN): https://t.co/qegrkc9SPy CISA ICS Medical Advisory: https://t.co/Cv3Xe1nEtY National Vulnerability Database (NVD): https://t.co/cjriMrtoif RadiAnt DICOM Viewer Official Website: https://t.co/v2PgXrFOSH Tags: #RadiAntDICOMViewer #Vulnerability #Security #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 08:38Current
5.5Medium risk
Vulners AI Score5.5
CVSS 45.7
CVSS 3.15.7
EPSS0.00139
SSVC
76