The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, resulting in a denial-of-service condition. This vulnerability requires no authentication, and the application must be manually restarted after the attack. The issue poses a significant risk to availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.7 | CVE-2025-53948 |
Exploitation
To exploit this vulnerability, an attacker can send a specially crafted HL7 message to the Sante PACS Server over the network. This message will cause the server to crash, leading to a denial-of-service condition. Since no authentication is required, any remote attacker can perform this action.
Affected Products
- Sante PACS Server: A medical imaging and archiving solution that is vulnerable to denial-of-service attacks through crafted HL7 messages.
Mitigation
To mitigate this vulnerability, it is recommended to implement network security measures such as firewalls to restrict access to the Sante PACS Server. Additionally, monitoring and logging of incoming HL7 messages can help detect and prevent potential attacks.