References https://nvd.nist.gov/vuln/detail/CVE-2025-2480 https://ci-isac.org.au/wp-content/uploads/2025/04/CVE-2025-2480-Santesoft-DICOM-viewer.pdf https://github.com/advisories/GHSA-gxxp-q6ph-495x https://cert.kenet.or.ke/cve-2025-2480-santesoft-sante-dicom-viewer-pro-out-bounds-write-arbitrary-code-execution https://vuldb.com/?id.300521 https://avd.aliyun.com/detail?id=AVD-2025-2480 https://www.nsfocus.net/vulndb/118169 https://windowsforum.com/threads/healthcare-cybersecurity-alert-critical-dicom-viewer-vulnerability-and-how-to-protect-your-systems.362945/
Related VulnerabilitiesPoClaravel-ignition-log-viewer: Laravel Ignition - Log Viewer Information Disclosure昂捷商业连锁管理信息系统 /WebForms/RptViewer.aspx 服务器端请求伪造漏洞PoCCVE-2021-34427: Eclipse BIRT Viewer - Remote Code ExecutionSante PACS Server.exe 路径遍历信息泄露 (CVE-2025-2264)PoCCVE-2017-18562: Error Log Viewer by BestWebSoft < 1.0.6 - Cross-Site ScriptingPoCCVE-2021-24495: Wordpress Marmoset Viewer <1.9.3 - Cross-Site ScriptingPoCCVE-2024-12849: Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File ReadPoCCVE-2025-2264: Sante PACS Server.exe - Path Traversal Information DisclosurePoCCVE-2018-12909: Webgrind fileviewer.phtml 任意文件读取漏洞PoCcloudfront-viewer-policy: CloudFront Viewer Protocol PolicyPoCangjie-crm-rptviewer-ssrf: 昂捷CRM-RptViewer.aspx存在SSRF漏洞PoCevolucare-ecsimaging-download-stats-dicom-anyfile-read: Evolucare Ecsimaging download_stats_dicom.php 任意文件读取漏洞PoCip-webcam: IP Webcam Viewer Page - Detect