Lucene search

IcscertCVELIST:CVE-2023-40150

HistorySep 11, 2023 - 7:05 p.m.

CVE-2023-40150 Softneta MedDream PACS Exposed Dangerous Method or Function

2023-09-1119:05:00

CWE-749

icscert

www.cve.org

softneta

meddream

pacs

authentication

bypass

remote code execution

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

89.0%

JSON

Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "MedDream PACS",
    "vendor": "Softneta",
    "versions": [
      {
        "lessThanOrEqual": " v7.2.8.810",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.cisa.gov/news-events/ics-medical-advisories/icsma-23-248-01

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.02 Low

EPSS

Percentile

89.0%

JSON

Related for CVELIST:CVE-2023-40150