Vulnerability · Published Mar 13, 2025 · Assigned by tenable
CVE-2025-2263Santesoft Sante PACS Server Stack-based Buffer Overflow
Critical 9.8
In plain English
A critical-severity stack buffer overflow in Sante PACS Server from Santesoft. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 1.2% (higher than 68% of all known vulnerabilities).
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)1.2%top 31.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or password is supplied by an unauthenticated remote attacker.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Santesoft | Sante PACS Server | 4.1.0 |
Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H