PT-2025-46450 · Nuance · Nuance Powerscribe

Published 2025-11-11 · Updated 2026-02-12 · CVE-2025-30398

Positive Technologies (AI Summary)

CVSS v2.0

9.4

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Nuance PowerScribe (affected versions not specified)

Description A lack of proper authorization in Nuance PowerScribe allows an unauthorized attacker to disclose information over a network. The issue affects a radiology reporting system used in healthcare environments. The core of the problem lies in missing authorization checks, enabling unauthorized access to sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

BDU:2025-14153

CVE-2025-30398

Affected Products

Nuance Powerscribe

References · 12

• https://osv.dev/vulnerability/CVE-2025-30398 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-30398 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-14153 · Security Note
• https://msrc.microsoft.com/update-guide/releaseNote/2025-Nov · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-30398 · Security Note
• https://t.me/cveNotify/151847 · Telegram Post
• https://twitter.com/CveTodo/status/1988315346378367430 · Twitter Post
• https://t.me/true_secator/7617 · Telegram Post
• https://twitter.com/0dayPublishing/status/1988621511410762143 · Twitter Post
• https://twitter.com/CVEnew/status/1988348985464005113 · Twitter Post
• https://t.me/S_E_Reborn/6022 · Telegram Post
• https://t.me/cveNotify/142451 · Telegram Post