Alert Code: ICSMA-25-100-01
EXECUTIVE SUMMARY
- CVSS v4 8.7
- ATTENTION: Exploitable remotely/low attack complexity/public exploits are available
- Vendor: INFINITT Healthcare
- Equipment: INFINITT PACS
- Vulnerabilities: Unrestricted Upload of File with Dangerous Type, Exposure of Sensitive System Information to an Unauthorized Control Sphere,
2. RISK EVALUATION
Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files and access unauthorized system resources, resulting in arbitrary code execution or information disclosure.
3. TECHNICAL DETAILS
3.1 AFFECTED PRODUCTS
The following INFINITT Healthcare products are affected:
- INFINITT PACS System Manager: Versions 3.0.11.5 BN9 and prior
Read more at CISA.
