MicroDicom DICOM Viewer
Advisory ansehen veröffentlicht 2024-06-11
Successful exploitation of these vulnerabilities could allow an attacker to both retrieve and plant medical image files on a victim's system and cause a stack-based buffer overflow, which could result in sensitive information disclosure and arbitrary code execution.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-33606US | high8.8OT erhöht | — | ||
An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User inter… | ||||
| CVE-2024-28877US | high8.8 | — | ||
MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User intera… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSMA-24-163-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-24-163-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- BehobenDICOM Viewer
MicroDicom recommends users upgrade to DICOM Viewer version 2024.2.
https://www.microdicom.com/downloads.html - BehobenDICOM Viewer
MicroDicom recommends users upgrade to DICOM Viewer version 2024.2.
https://www.microdicom.com/downloads.html
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan