MicroDicom DICOM Viewer
view advisory published 2024-06-11
Successful exploitation of these vulnerabilities could allow an attacker to both retrieve and plant medical image files on a victim's system and cause a stack-based buffer overflow, which could result in sensitive information disclosure and arbitrary code execution.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-33606US | high8.8OT elevated | — | ||
An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User inter… | ||||
| CVE-2024-28877US | high8.8 | — | ||
MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User intera… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSMA-24-163-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-24-163-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- FixedDICOM Viewer
MicroDicom recommends users upgrade to DICOM Viewer version 2024.2.
https://www.microdicom.com/downloads.html - FixedDICOM Viewer
MicroDicom recommends users upgrade to DICOM Viewer version 2024.2.
https://www.microdicom.com/downloads.html
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan