Denial-of-Service Vulnerability in Sante PACS Server by Sante
CVE-2025-2284

7.5HIGH

Key Information:

Vendor

Santesoft

Vendor
CVE Published:
13 March 2025

What is CVE-2025-2284?

A denial-of-service vulnerability exists in the 'GetWebLoginCredentials' function of Sante PACS Server.exe. This flaw may allow an attacker to exploit the affected application, potentially leading to service interruptions and system unavailability. It is crucial for users of Sante PACS Server to review their security measures and apply necessary updates to mitigate risks associated with this vulnerability.

Affected Version(s)

Sante PACS Server 4.1.0

Sante PACS Server 4.2.0

References

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.