The Sante PACS Server Web Portal has a critical vulnerability that allows credential information to be sent without encryption. This exposes sensitive data to potential interception during transmission. The issue is compounded by the high attack complexity, making it a significant risk for users.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.1 | CVE-2025-54156 |
Exploitation
To exploit this vulnerability, an attacker can intercept the unencrypted credential information transmitted by the Sante PACS Server Web Portal over the network. Given the high attack complexity, the attacker would need to have access to the network traffic, making it essential for organizations to secure their network environments.
Affected Products
- Sante PACS Server Web Portal: A web-based interface for managing medical imaging data that lacks encryption for credential transmission.
Mitigation
To mitigate this vulnerability, it is crucial to implement encryption for all credential transmissions within the Sante PACS Server Web Portal. Organizations should also review their network security measures to prevent unauthorized access and ensure that sensitive data is adequately protected during transmission.