Medixant RadiAnt DICOM Viewer

🗓️ 20 Feb 2025 07:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics

ics🔗 www.cisa.gov👁 13 Views

Vulnerability enables machine-in-the-middle attack; CISA urges defensive measures and risk assessment.

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2025-1001	21 Feb 202501:18	–	circl
CNNVD	Medixant RadiAnt DICOM Viewer 信任管理问题漏洞	21 Feb 202500:00	–	cnnvd
CVE	CVE-2025-1001	21 Feb 202500:48	–	cve
Cvelist	CVE-2025-1001 Medixant RadiAnt DICOM Viewer Improper Certificate Validation	21 Feb 202500:48	–	cvelist
EUVD	EUVD-2025-4555	3 Oct 202520:07	–	euvd
NVD	CVE-2025-1001	21 Feb 202501:15	–	nvd
Positive Technologies	PT-2025-7482 · Medixant · Medixant Radiant Dicom Viewer	21 Feb 202500:00	–	ptsecurity
Tenable Nessus	RadiAnt DICOM Viewer (CVE-2025-1001)	28 Feb 202500:00	–	nessus
RedhatCVE	CVE-2025-1001	23 Feb 202501:28	–	redhatcve
Vulnrichment	CVE-2025-1001 Medixant RadiAnt DICOM Viewer Improper Certificate Validation	21 Feb 202500:48	–	vulnrichment

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsma-25-051-01.json
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-25-051-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/resources-tools/resources/ics-recommended-practices
cisa	www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
cisa	www.cisa.gov/topics/industrial-control-systems
cisa	www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
cisa	www.cisa.gov/uscert/ncas/tips/ST04-014
us-cert	www.us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
cisa	www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B

20 Feb 2025 07:00Current

5.8Medium risk

Vulners AI Score5.8

CVSS 45.7

CVSS 3.15.7

EPSS0.00013

SSVC

vulnerability machine-in-the-middle attack cisa recommended practices control systems security network exposure minimization firewalls usage remote access security virtual private networks cybersecurity strategies social engineering attacks.