Santesoft Sante DICOM Viewer Pro

🗓️ 12 Oct 2023 06:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 33 Views

Sante DICOM Viewer Pro vulnerabilities, patch v12.2.

Reporter	Title	Published	Views	Family All 18
Circl	CVE-2023-35986	19 Oct 202322:34	–	circl
Circl	CVE-2023-39431	19 Oct 202322:34	–	circl
CNNVD	Santesoft Sante DICOM Viewer Pro Buffer Error Vulnerability	19 Oct 202300:00	–	cnnvd
CNNVD	Santesoft Sante DICOM Viewer Pro Buffer Error Vulnerability	19 Oct 202300:00	–	cnnvd
CVE	CVE-2023-35986	19 Oct 202317:35	–	cve
CVE	CVE-2023-39431	19 Oct 202317:32	–	cve
Cvelist	CVE-2023-35986 Santesoft Sante DICOM Viewer Pro Stack-based Buffer Overflow	19 Oct 202317:35	–	cvelist
Cvelist	CVE-2023-39431 Santesoft Sante DICOM Viewer Pro Out-of-bounds Write	19 Oct 202317:32	–	cvelist
EUVD	EUVD-2023-39970	3 Oct 202520:07	–	euvd
EUVD	EUVD-2023-43155	3 Oct 202520:07	–	euvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2023/icsma-23-285-01.json
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-23-285-01
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

12 Oct 2023 06:00Current

8.1High risk

Vulners AI Score8.1

CVSS 3.17.8

EPSS0.00268

SSVC

sante dicom viewer pro vulnerabilities out-of-bounds write stack-based buffer overflow santesoft cisa cve-2023-39431 cve-2023-35986 cvss v3 base score 7.8 healthcare public health cyprus social engineering email scams phishing attacks ics security.