Vulnerability · Published Mar 13, 2025 · Assigned by tenable
CVE-2025-2284Santesoft Sante PACS Server Access of Uninitialized Pointer DoS
High 7.5
In plain English
A high-severity security flaw in Sante PACS Server from Santesoft. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 6.3% (higher than 94% of all known vulnerabilities).
Severity (CVSS 3.1)7.5High
Exploit odds (30 days)6.3%top 6.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A denial-of-service vulnerability exists in the "GetWebLoginCredentials" function in "Sante PACS Server.exe".
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Santesoft | Sante PACS Server | 4.1.0 |
Weakness: CWE-824 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H