Skip to content
OpenAdvisories
High ICSMA-25-100-01 3 CVEs

INFINITT Healthcare INFINITT PACS

Published Apr 10, 2025 · Updated May 6, 2025 · Revision 2

Vendor: INFINITT Healthcare Product: INFINITT PACS System Manager

Summary

Successful exploitation of these vulnerabilities could allow an attacker to upload malicious files and access unauthorized system resources, resulting in arbitrary code execution or information disclosure.

Vulnerabilities 3

  • High 7.5
    CVE-2025-27721

    INFINITT Healthcare INFINITT PACS Exposure of Sensitive System Information to an Unauthorized Control Sphere

    Unauthorized users can access INFINITT PACS System Manager without proper authorization, which could lead to unauthorized access to system resources.

    INFINITT Healthcare INFINITT PACS System Manager
  • Medium 6.3
    CVE-2025-24489

    INFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type

    An attacker could exploit this vulnerability by uploading arbitrary files via a specific service, which could lead to system compromise.

    INFINITT Healthcare INFINITT PACS System Manager
  • Medium 6.3
    CVE-2025-27714

    INFINITT Healthcare INFINITT PACS Unrestricted Upload of File with Dangerous Type

    An attacker could exploit this vulnerability by uploading arbitrary files via the a specific endpoint, leading to unauthorized remote code execution or system compromise.

    INFINITT Healthcare INFINITT PACS System Manager

Revision history

  1. #2

    Revision - Fixing typos

  2. #1

    Initial Publication

References