CVE-2025-1001
Medixant RadiAnt DICOM Viewer Improper Certificate Validation
- State
- Published
- Severity
- 5.7 Medium
- Published
- Feb 21, 2025
- Updated
- Feb 21, 2025
- Reserved
- Feb 3, 2025
Description
Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack (MITM). An attacker could modify the server's response and deliver a malicious update to the user.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 5.7 Medium | CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N | icscert |
| 3.1 | 5.7 Medium | CVSS:3.1/AV:A/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N | icscert |
Weaknesses
- CWE-295 Improper Certificate Validation
Affected Products
| Product | Versions |
|---|---|
RadiAnt DICOM ViewerMedixant |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.