CVE-2023-40150

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Softneta MedDream PACS does not perform an authentication check and performs some dangerous functionality, which could result in unauthenticated remote code execution.0

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-749

Affected software

Vendor	Product	Versions
Softneta	MedDream PACS	<= v7.2.8.810

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-248-01Broken Link, Third Party Advisory, US Government Resource
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-23-248-01Broken Link, Third Party Advisory, US Government Resource

Timeline

Published: Sep 11, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-401519.8When user authentication is not enabled the shell can execute commands with the highest privileges. Red Lion SixTRAK and VersaTRAK Series RT CVE-2023-401527.8When Fuji Electric Tellus Lite V-Simulator parses a specially-crafted input file an out of bounds write may occur.CVE-2023-401536.1The affected product is vulnerable to a cross-site scripting vulnerability, which could allow an attacker to access the web application to i CVE-2023-401547.8Incorrect default permissions in the Intel(R) SUR for Gameplay Software before version 2.0.1901 may allow privillaged user to potentially en CVE-2023-401556.7Uncontrolled search path for some Intel(R) CST software before version 2.1.10300 may allow an authenticated user to potentially enable escal CVE-2023-401567.8Uncontrolled search path element in some Intel(R) SSU software before version 3.0.0.2 may allow an authenticated user to potentially enable CVE-2023-401588.8Hidden functionality vulnerability in the CBC products allows a remote authenticated attacker to execute an arbitrary OS command on the devi CVE-2023-40163.3Under some circumstances, this weakness allows a user who has access to run the “ps” utility on a machine, the ability to write almost unlim CVE-2023-401603.7Directory traversal vulnerability exists in Mailing List Search CGI (pmmls.exe) included in A.K.I Software's PMailServer/PMailServer2 produc CVE-2023-401617.8Improper access control in some Intel Unite(R) Client software before version 4.2.35041 may allow an authenticated user to potentially enabl CVE-2023-401639.8An out-of-bounds write vulnerability exists in the allocate_buffer_for_jpeg_decoding functionality of Accusoft ImageGear 20.1. A specially c CVE-2023-401645.5Notepad++ is a free and open-source source code editor. Versions 8.5.6 and prior are vulnerable to global buffer read overflow in `nsCodingS