OS Command Injection in Meridian Technique Materialise OrthoView Software
CVE-2025-23049

8.4HIGH

Key Information:

Vendor

Materialise

Status
Orthoview
Vendor
CVE Published:
23 June 2025

What is CVE-2025-23049?

The Meridian Technique Materialise OrthoView software, specifically version 7.5.1 and earlier, is susceptible to an OS Command Injection vulnerability when servlet sharing is enabled. This flaw allows attackers to execute arbitrary commands on the host operating system, posing significant security risks. Users are advised to review the security documentation and apply any available patches to mitigate exposure.

Affected Version(s)

OrthoView 0 <= 7.5.1

References

https://www.materialise.com/en/healthcare/orthoview
https://www.materialise.com/en/healthcare/orthoview/secur...

CVSS V4

Score:
8.4
Severity:
HIGH
Confidentiality:
High
Integrity:
Low
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
Physical
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-23049 : OS Command Injection in Meridian Technique Materialise OrthoView Software