CVE-2025-2264: Santesoft Sante PACS Server Path Traversal Information Disclosure
Published Mar 13, 2025
·Updated
A Path Traversal Information Disclosure vulnerability exists in "Sante PACS Server.exe". An unauthenticated remote attacker can exploit it to download arbitrary files on the disk drive where the application is installed.
Affected Software
2 affected components
Santesoft Sante PACS Server
Santesoft Sante PACS Server=4.1.0
Event History
Mar 13, 2025
CVE Published
via MITRE·04:29 PM
Data Sourced
via MITRE·04:29 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-2264?
CVE-2025-2264 is considered a critical vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2025-2264?
To mitigate CVE-2025-2264, update the Sante PACS Server to the latest version provided by the vendor.
3
Who is affected by CVE-2025-2264?
Users of Sante PACS Server, particularly those running vulnerable versions, are at risk of CVE-2025-2264.
4
What can an attacker do with CVE-2025-2264?
An attacker can exploit CVE-2025-2264 to gain unauthorized access to and download arbitrary files from the server.
5
Is CVE-2025-2264 a remote attack?
Yes, CVE-2025-2264 can be exploited by an unauthenticated remote attacker.