CVE-2025-11671
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk28th percentile - higher than 28% of all known CVEs
Summary
Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain information such as account names and IP addresses.
Risk Assessment
An attacker can obtain account names and IP addresses without authentication, facilitating network mapping and further attacks.
Recommendation
Immediately restrict access to the web interface (e.g., via firewall or VPN) and apply the vendor patch when available.
Other vulnerabilities in Uniweb/SoliPACS WebServer
Original NVD description (English source)
Uniweb/SoliPACS WebServer developed by EBM Technologies has a Missing Authentication vulnerability, allowing unauthenticated remote attackers to access a specific page to obtain information such as account names and IP addresses.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS