by Kastro
Paper/Archive/CVE-2025-2263

CVE-2025-2263

Santesoft Sante PACS Server — Santesoft Sante PACS Server Stack-based Buffer Overflow

EPSS 1%public exploitCVSS 9.8
critical.is priorityof 100
53
CVSS 9.8 (CNA, NVD agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.0.680 × 2013.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or password is supplied by an unauthenticated remote attacker.

Affected

ProductAffectedFixed inSource
Sante PACS Server4.1.04.2.0CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
tenable (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploittenable.com/security/research/tra-2025-08