Skip to main content

Softneta

3 CVEs vendor

Monthly

CVE-2018-25374 May 25, 14:15 HIGH POC This Week

Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path parameter. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Meddream Pacs Server Premium Softneta
NVD Exploit-DB
CVSS 4.0
8.7
EPSS
0.5%
CVE-2023-40150 Sep 11, 20:15 CRITICAL Act Now

Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Meddream Pacs Softneta
NVD
CVSS 3.1
9.8
EPSS
1.0%
CVE-2023-39227 Sep 11, 20:15 HIGH This Week

​Softneta MedDream PACS stores usernames and passwords in plaintext. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Meddream Pacs Softneta
NVD
CVSS 3.1
7.5
EPSS
0.3%
EPSS 1% CVSS 8.7
HIGH POC This Week

Softneta MedDream PACS Server Premium 6.7.1.1 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating the path parameter. Rated high severity (CVSS 8.7), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.

PHP Path Traversal Meddream Pacs Server Premium +1
NVD Exploit-DB
EPSS 1% CVSS 9.8
CRITICAL Act Now

Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

RCE Meddream Pacs Softneta
NVD
EPSS 0% CVSS 7.5
HIGH This Week

​Softneta MedDream PACS stores usernames and passwords in plaintext. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Information Disclosure Meddream Pacs Softneta
NVD

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy