high7.5
CVE-2025-53948
The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition.
Impact
The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The application would require a manual restart and no authentication is required.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Santesoft | Sante Pacs Server | before 4.2.3 |