RadiAnt DICOM Viewer (CVE-2025-1001)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(216941);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/09/26");

  script_cve_id("CVE-2025-1001");
  script_xref(name:"IAVB", value:"2025-B-0032");

  script_name(english:"RadiAnt DICOM Viewer (CVE-2025-1001)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by a improper certificate validation vulnerability");
  script_set_attribute(attribute:"description", value:
"Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's
certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack (MITM).
An attacker could modify the server's response and deliver a malicious update to the user.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.radiantviewer.com/c/security-advisory-cve-2025-1001/");
  script_set_attribute(attribute:"solution", value:
"Update to RadiAnt DICOM Viewer version 2025.1 or later");
  script_set_attribute(attribute:"agent", value:"windows");
  script_set_cvss_base_vector("CVSS2#AV:A/AC:L/Au:N/C:N/I:C/A:N");
  script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N");
  script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-1001");

  script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
  script_set_attribute(attribute:"exploit_available", value:"false");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/02/20");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/02/20");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/02/28");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"x-cpe:/a:medixant:radiantviewer");
  script_set_attribute(attribute:"stig_severity", value:"II");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Misc.");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("radiant_dicom_viewer_win_installed.nbin");
  script_require_keys("installed_sw/RadiAnt DICOM Viewer");

  exit(0);
}

include('vcf.inc');

var app_info = vcf::get_app_info(app:'RadiAnt DICOM Viewer');

var constraints = [
  { 'fixed_version' : '2025.1' }
];

vcf::check_version_and_report(app_info:app_info, constraints:constraints, severity:SECURITY_WARNING);