CVE-2025-0571: medium-severity vulnerability in Sante PACS Server
Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 1.0%
Sante PACS Server Web Portal DCM File Parsing Memory Corruption Denial-of-Service Vulnerability. This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is required to exploit this vulnerability.
The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of user-supplied data, which can result in a memory corruption condition. An attacker can leverage this vulnerability to create a denial-of-service condition on the system. Was ZDI-CAN-25305.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected products
Sante · PACS ServerRelated CVEs — Sante PACS Server
In the same product, most dangerous first.
CVE-2022-2272CRITICALCVE-2022-2272EPSS 2.8%CVE-2025-0573MEDIUMSante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write VulnerabilityEPSS 1.9%CVE-2025-0572MEDIUMSante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write VulnerabilityEPSS 1.6%CVE-2024-1863CRITICALSante PACS Server Token Endpoint SQL Injection Remote Code Execution VulnerabilityEPSS 1.1%CVE-2025-0569HIGHSante PACS Server DCM File Parsing Memory Corruption Denial-of-Service VulnerabilityEPSS 1.0%CVE-2025-0568HIGHSante PACS Server DCM File Parsing Memory Corruption Denial-of-Service VulnerabilityEPSS 1.0%