PT-2024-25372 · Unknown · Microdicom Dicom Viewer

Michael Heinzl · Published 2024-06-11 · Updated 2025-04-23 · CVE-2024-33606

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MicroDicom DICOM Viewer (affected versions not specified)

Description The issue allows an attacker to retrieve sensitive files, such as medical images, and also enables them to add new medical images or overwrite existing ones on the system. This can be exploited with user interaction.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

CWE-939

Related Identifiers

CVE-2024-33606

Affected Products

Microdicom Dicom Viewer

References · 5

• https://osv.dev/vulnerability/CVE-2024-33606 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-33606 · Security Note
• https://cisa.gov/news-events/ics-medical-advisories/icsma-24-163-01 · Note
• https://t.me/cvenotify/112939 · Telegram Post
• https://t.me/cvenotify/119577 · Telegram Post