Description
Remote Code Execution in the `IModular.exe` URI handler in INFINITT Healthcare Co., Ltd. INFINITT PACS allows a remote unauthenticated attacker to invoke unintended application functionality and potentially execute arbitrary code via a crafted `imodular:// URI` containing attacker-controlled command and argument parameters.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| INFINITT Healthcare | System Manager | 3.0.11.3 – ≤ 3.0.11.5 | — |