Unauthorized Access Vulnerability in INFINITT PACS System Manager by INFINITT
CVE-2025-27721

8.7HIGH

Key Information:

Vendor

Infinitt Healthcare

Status
Infinitt Pacs System Manager
Vendor
CVE Published:
21 August 2025

What is CVE-2025-27721?

A vulnerability in INFINITT PACS System Manager allows unauthorized users to gain access without proper authentication. This flaw can lead to the exposure of sensitive system resources, potentially compromising patient data and system integrity. It is crucial for users to assess their security measures and update systems to safeguard against unauthorized access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

INFINITT PACS System Manager 0 <= 3.0.11.5 BN9

INFINITT PACS System Manager 3.0.11.5 BN10

References

https://www.cisa.gov/news-events/ics-medical-advisories/i...

CVSS V4

Score:
8.7
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Piotr Kijewski of the Shadowserver Foundation reported these vulnerabilities to CISA.
JSON
.