PT-2025-7482 · Medixant · Medixant Radiant Dicom Viewer

Sharon Brizinov · Published 2025-02-21 · Updated 2025-02-25 · CVE-2025-1001

Positive Technologies (AI Summary)

CVSS v3.1

5.7

Medium

Base vector

AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Medixant RadiAnt DICOM Viewer (affected versions not specified)

Description The issue is due to the failure of the update mechanism to verify the update server's certificate, which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack (MITM). An attacker could modify the server's response and deliver a malicious update to the user.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Certificate Validation

Weakness Enumeration

CWE-295

Related Identifiers

CVE-2025-1001

Affected Products

Medixant Radiant Dicom Viewer

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-1001 · Security Note
• https://t.me/cvedetector/18620 · Telegram Post
• https://reddit.com/r/u_clarotyofficial/comments/1iy57du/vulnerability_disclosure_medixant_radiant_dicom · Reddit Post
• https://t.me/cvenotify/111958 · Telegram Post
• https://twitter.com/syedaquib77/status/1892844798413074739 · Twitter Post
• https://cisa.gov/news-events/ics-medical-advisories/icsma-25-051-01 · Note
• https://twitter.com/CVEnew/status/1892741054698319949 · Twitter Post
• https://twitter.com/syedaquib77/status/1892840484961472765 · Twitter Post
• https://radiantviewer.com/files/RadiAnt-2025.1-Setup.exe · Note