by Kastro
Paper/Archive/CVE-2025-53912

CVE-2025-53912

MedDream MedDream PACS Premium — An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870.

EPSS 0.6%CVSS 9.6
critical.is priorityof 100
39
CVSS 9.6 (CNA)9.6 / 10 × 3028.8Not in CISA KEV+300.0EPSS percentile 50.0.500 × 2010.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of MedDream PACS Premium 7.3.6.870. A specially crafted HTTP request can lead to an arbitrary file read. An attacker can send http request to trigger this vulnerability.

Affected

ProductAffectedFixed inSource
MedDream PACS Premium7.3.6.870–CNA

Scores by source

talos (CNA)9.6CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

reftalosintelligence.com/vulnerability_reports/TALOS-2025-2273reftalosintelligence.com/vulnerability_reports/TALOS-2025-2273