No known public exploitation specifically targeting this vulnerability has been reported to CISA at this time. This vulnerability is not exploitable remotely.
Credit: Michael Heinzl
From CISA's machine-readable CSAF 2.0 advisory (JSON).
| CVE | Weakness | CVSS v3 | Details |
|---|---|---|---|
| CVE-2024-1696 | CWE-787 Out-of-bounds Write | 7.8 High |
On Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging installations, a local attacker could perform an out-of-bounds write, which could allow for arbitrary code execution. Vendor fix: Santesoft released an updated version of their product and recommends users update Sante FFT Imaging to v1.4.2 or later. ↗ Mitigation: CISA recommends users take the following measures to protect themselves from social engineering attacks: Mitigation: Do not click web links or open attachments in unsolicited email messages. Affected, fixed & timelineAffected:
Mitigation: Refer to Recognizing and Avoiding Email Scams for more information on avoiding email scams. Mitigation: Refer to Avoiding Social Engineering and Phishing Attacks for more information on social engineering attacks. |
Scores and weakness types are as CISA or the republishing vendor stated them in this advisory; the linked CVE pages carry the independently enriched CVSS and SSVC assessments.
No coverage found in monitored research blogs or news feeds.
| CVE | CVSS | Affected |
|---|---|---|
| CVE-2024-1696 | 7.8 High | Santesoft Sante FFT Imaging In Santesoft Sante FFT Imaging versions 1.4.1 and prior once a user opens a malicious DCM file on affected FFT Imaging installations, a local attacke… |
Named by the advisory itself. Each CVE links to its tracked detail page.
No KEV-catalogued vendors are named in this publication.