Description
The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The application would require a manual restart and no authentication is required.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Santesoft | Sante PACS Server | < 4.2.3 | 4.2.3 |
Advisories 1
- ICSMA-25-224-01 Santesoft Sante PACS Server CISA ICS & IT advisories · Aug 12, 2025