Volker Schönefeld

**Name of the Vulnerable Software and Affected Versions** epa4all-client versions prior to 1.2.5 **Description** Any network-reachable caller can write arbitrary documents to any patient's electronic health record accessible by the institution's SMC-B card. In misconfigured deployments, such as those following the production Docker example in the README, this can be exploited from the local network without credentials. **Recommendations** Update to version 1.2.5. Use network policies or proxies to enforce service-to-service authentication via mTLS (Mutual Transport Layer Security), which is a process where both parties in a communication link authenticate each other. Run the service in an isolated network namespace, such as a Kubernetes sidecar. Implement a service-mesh with corresponding policies.

**Name of the Vulnerable Software and Affected Versions** epa4all-client versions prior to 1.2.2 **Description** An attacker positioned on the network path between the ePA service and the Konnektor can present any TLS certificate, such as self-signed, expired, or those with an incorrect Common Name (CN), to intercept all SOAP traffic. This interception may expose patient identifiers (KVNR), SMC-B card operations involving authentication and signing, document content, and credential exchanges. **Recommendations** Update to version 1.2.2. Use the library directly instead of the REST wrapper as a temporary workaround.

**Name of the Vulnerable Software and Affected Versions** epa4all-client versions prior to 1.2.2 **Description** An attacker capable of performing a Man-in-the-Middle (MITM) attack on the TLS connection between the client and the Identity Provider (IDP) within the Telematik Infrastruktur network can substitute a forged discovery document. This document redirects the `uri puk idp enc` and `uri puk idp sig` variables to URLs controlled by the attacker. Consequently, the client encrypts the SMC-B-signed challenge response using the attacker's encryption key and sends it via a POST request to the attacker's authentication endpoint, allowing the capture of signed authentication material. **Recommendations** Update to version 1.2.2.

**Name of the Vulnerable Software and Affected Versions** epa4all-client (affected versions not specified) **Description** A signature bypass exists in the `isTrusted()` function of the `SignedPublicKeysTrustValidatorImpl` class. The ECDSA signature verification process discards the boolean return value of the `Signature.verify()` function. Although the system performs certificate chain validation, OCSP checks, and signature algorithm setup, it fails to verify if the signature actually matches, resulting in the function returning true for any structurally valid signature. **Recommendations** Update to the version that includes the fix provided in pull request #34.

Name of the Vulnerable Software and Affected Versions OFFIS DCMTK versions up to 3.7.0 Description A security flaw exists in OFFIS DCMTK up to version 3.7.0. The issue affects the `executeOnReception`/`executeOnEndOfStudy` function within the `dcmnet/apps/storescp.cc` file of the `storescp` component. Manipulation of this function can lead to OS command injection. Remote exploitation is possible. Recommendations Apply patch edbb085e45788dccaf0e64d71534cfca925784b8.

**Name of the Vulnerable Software and Affected Versions** Gematik Authenticator versions prior to 4.16.0 **Description** Gematik Authenticator is used to securely authenticate users for login to digital health applications. Versions prior to 4.16.0 are susceptible to authentication flow hijacking. An attacker could potentially authenticate as a victim user if the user clicks on a malicious deep link. **Recommendations** Update Gematik Authenticator to version 4.16.0 or greater.