CVE-2025-10350: SQL injection in CGM NETRAAD
SQL Injection vulnerability in "imageserver" module when processing C-FIND queries in CGM NETRAAD software allows attacker connected to PACS gaining access to database, including data processed by GCM CLININET software.This issue affects CGM NETRAAD with imageserver module in versions before 7.9.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-10350?
CVE-2025-10350 has been classified with a high severity due to its potential for SQL injection leading to unauthorized database access.
How do I fix CVE-2025-10350?
To mitigate CVE-2025-10350, upgrade CGM NETRAAD to version 7.9.0 or later to apply the necessary security patches.
What software is affected by CVE-2025-10350?
CVE-2025-10350 specifically affects CGM NETRAAD with the imageserver module prior to version 7.9.0.
What type of attack does CVE-2025-10350 facilitate?
CVE-2025-10350 facilitates SQL injection attacks that can allow an attacker to access sensitive database information.
Who can exploit CVE-2025-10350?
An attacker connected to PACS can exploit CVE-2025-10350 to gain unauthorized access to the database.