medDream PACS Server 7.3.2.840 Premium Edition
Approved changes feed: RSS · Atom
cpe:2.3:a:meddream:pacs_server:7.3.2.840:*:*:*:premium:*:*:*
part: a version: 7.3.2.840 update: *
| Vendor | Meddream (2ba66fd4-3c3e-5009-9a1a-7256d616c686) |
|---|---|
| Product | Pacs Server (09259e0d-cb2f-5f2c-b1c4-2ac5c7b164f4) |
| Edition | * |
| Language | * |
| Software edition | premium |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-3480 |
vulnerable | 2026-06-08 07:23:08.975481 |
MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability
MEDIUM (5.3)
MedDream WEB DICOM Viewer Cleartext Transmission of Credentials Information Disclosure Vulnerability. This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of MedDream WEB DICOM Viewer. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the Web Portal. The issue results from the lack of encryption when transmitting credentials. An attacker can leverage this vulnerability to disclose transmitted credentials, leading to further compromise. Was ZDI-CAN-25842.
Published: 2025-05-22T00:51:28.947Z
Updated: 2025-05-22T13:37:20.152Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-27724 |
vulnerable | 2026-06-08 07:14:55.486711 |
Details available
CRITICAL (9.3)
A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability.
Published: 2025-07-28T13:36:19.725Z
Updated: 2025-11-03T19:46:23.225Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-26469 |
vulnerable | 2026-06-08 07:12:51.679588 |
Details available
CRITICAL (9.3)
An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840.
A specially crafted application can decrypt credentials stored in a configuration-related registry key.
An attacker can execute a malicious script or application to exploit this vulnerability.
Published: 2025-07-28T13:36:21.156Z
Updated: 2025-11-03T19:45:27.179Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.