The Sante PACS Server is vulnerable to a denial-of-service condition that can be triggered by a remote attacker sending a specially crafted HL7 message. This attack causes the main thread of the application to crash, requiring a manual restart. Notably, no authentication is needed to exploit this vulnerability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.7 | CVE-2025-53948 |
Exploitation
To exploit this vulnerability, an attacker can send a specially crafted HL7 message to the Sante PACS Server over the network. This message will cause the server to crash, leading to a denial-of-service condition. Since no authentication is required, any remote attacker can perform this action.
Affected Products
- Sante PACS Server: A medical imaging solution that is susceptible to denial-of-service attacks due to improper handling of HL7 messages.
Mitigation
To mitigate this vulnerability, it is recommended that users of the Sante PACS Server implement network security measures to restrict access to the server. Additionally, keeping the software updated and monitoring for unusual traffic patterns can help prevent exploitation.