PT-2026-5284 · Unknown · Meddream Pacs Server

Bzyo · Publicado 2026-01-29 · Atualizado 2026-01-29 · CVE-2020-37009

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MedDream PACS Server version 6.8.3.751

Description The software contains an authenticated remote code execution issue allowing authorized users to upload malicious PHP files. An attacker can exploit the /uploadImage.php API endpoint by authenticating and uploading a PHP shell to execute arbitrary system commands with elevated privileges.

Recommendations Update to a newer version that contains a fix for this vulnerability.

Exploit

Correção

RCE

Unrestricted File Upload

Enumeração de Fraquezas

CWE-434

Identificadores relacionados

CVE-2020-37009

Produtos afetados

Meddream Pacs Server

Referências · 5

• 🔥 https://exploit-db.com/exploits/48853 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-37009 · Nota de Segurança
• https://meddream.com/products/meddream-pacs-server · Nota
• https://vulncheck.com/advisories/meddream-pacs-server-remote-code-execution · Nota
• https://t.me/CVEtracker/43233 · Publicação no Telegram