critical9.6
CVE-2025-53912
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870.
Impact
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Meddream | Pacs Server | Version 7.3.6.870 |