CVE-2025-53912
CriticalSummary
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability.
Risk Assessment
An attacker can read arbitrary files from the system, potentially leading to exposure of sensitive data, including patient medical data, compromising confidentiality and regulatory compliance.
Recommendation
Update MedDream PACS Premium to the latest version containing a fix or restrict access to the application.
Original NVD description (English source)
An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.