Skip to content
OpenAdvisories
Critical ICSMA-23-248-01 2 CVEs

Softneta MedDream PACS Premium

Published Sep 5, 2023 · Updated Sep 5, 2023

Vendor: Softneta Product: MedDream PACS

Summary

Successful exploitation of these vulnerabilities could allow an attacker to obtain and leak plaintext credentials or remotely execute arbitrary code.

Vulnerabilities 2

  • Critical 9.8
    CVE-2023-40150

    Softneta MedDream PACS Exposed Dangerous Method or Function

    Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0

    Softneta MedDream PACS
  • Medium 6.1
    CVE-2023-39227

    ​Softneta MedDream PACS Plaintext Storage of a Password

    ​Softneta MedDream PACS stores usernames and passwords in plaintext. The plaintext storage could be abused by attackers to leak legitimate user’s credentials.

    Softneta MedDream PACS

Revision history

  1. #1

    Initial Publication

References