Beveiligingsadvies

CVE-2022-2120

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-06-24 15:00:18
Laatst bijgewerkt 2025-11-03 19:26:45
Toegewezen door icscert
CVSS-score 7.5
Status PUBLISHED

Beschrijving

OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.