Arbitrary File Upload Vulnerability in Software Product by Vendor
CVE-2025-27714

5.3MEDIUM

Key Information:

Vendor

Infinitt Healthcare

Status
Infinitt Pacs System Manager
Vendor
CVE Published:
21 August 2025

What is CVE-2025-27714?

This vulnerability allows an attacker to upload arbitrary files through a specific endpoint. If exploited, this can result in unauthorized remote code execution or a complete compromise of the system, posing significant risks to the security of the affected product.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

INFINITT PACS System Manager 0 <= 3.0.11.5 BN9

INFINITT PACS System Manager 3.0.11.5 BN10

References

https://www.cisa.gov/news-events/ics-medical-advisories/i...

CVSS V4

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Piotr Kijewski of the Shadowserver Foundation reported these vulnerabilities to CISA.
JSON
.