CVE-2025-1001CWE-295

Medixant RadiAnt DICOM Viewer Improper Certificate Validation

Medium · published February 21, 2025

CVSS v4.0
5.7
EPSS
0%
Percentile
3.2
In the wild
Unconfirmed
What it is

Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack (MITM). An attacker could modify the server's response and deliver a malicious update to the user.

The record
Technical detail
CVSS v4.0
5.7 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00142 · 3.2th percentile
Weakness
CWE-295 · Improper Certificate Validation
Published
2025-02-21T00:48Z
EPSS history
Timeline
  • 21 FEB 00:48Z
    Medixant RadiAnt DICOM Viewer Improper Certificate Validation
    cvelistv5