Vulnerability · Published Jun 11, 2024 · Assigned by icscert
CVE-2024-33606MicroDicom DICOM Viewer Improper Authorization in Handler for Custom URL Scheme
High 8.8
In plain English
A high-severity security flaw in DICOM Viewer from MicroDicom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.5%top 59.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| MicroDicom | DICOM Viewer | 0 – before 2024.2 |
Weakness: CWE-939 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H