CISA also recommends users take the following measures to protect themselves from social engineering attacks:
Do not click web links or open attachments in unsolicited email messages.
Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams.
Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks.
No known public exploitation specifically targeting these vulnerabilities has been reported to CISA at this time.
Credit: Chizuru Toyama (TXOne Networks)
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2025-53948 | CWE-415 Double Free | 7.5 High |
The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The application would require a manual restart and no authentication is required. Mitigation: Santesoft recommends users update PACS Server to Version 4.2.3 or later. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-54156 | CWE-319 Cleartext Transmission of Sensitive Information | 7.4 High |
The Sante PACS Server Web Portal sends credential information without encryption. Mitigation: Santesoft recommends users update PACS Server to Version 4.2.3 or later. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-54759 | CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 6.1 Medium |
Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie. Mitigation: Santesoft recommends users update PACS Server to Version 4.2.3 or later. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-54862 | CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') | 5.4 Medium |
Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpage and stealing the user's cookie. Mitigation: Santesoft recommends users update PACS Server to Version 4.2.3 or later. ↗ Affected, fixed & timelineAffected:
|
| CVE-2025-0572 | CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') | 4.3 Medium |
Sante PACS Server Web Portal allows remote attackers utilize DCM files to create arbitrary files on affected installations of Sante PACS Server. Mitigation: Santesoft recommends users update PACS Server to Version 4.2.3 or later. ↗ Affected, fixed & timelineAffected:
|
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2025-54156 | 9.1 Critical | Santesoft Sante PACS Server The Sante PACS Server Web Portal sends credential information without encryption. |
| CVE-2025-53948 | 8.7 High | Santesoft Sante PACS Server The Sante PACS Server allows a remote attacker to crash the main thread by sending a crafted HL7 message, causing a denial-of-service condition. The … |
| CVE-2025-54759 | 5.1 Medium | Santesoft Sante PACS Server Sante PACS Server is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a malicious webpa… |
| CVE-2025-54862 | 4.8 Medium | Santesoft Sante PACS Server Sante PACS Server web portal is vulnerable to stored cross-site scripting. An attacker could inject malicious HTML codes redirecting a user to a mali… |
| CVE-2025-0572 | 4.3 Medium | Sante PACS Server Sante PACS Server Web Portal DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to c… |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.