CVE-2025-0573

Summary

CVE-2025-0573 is a directory traversal arbitrary file write vulnerability affecting Sante PACS Server. This issue permits remote attackers to craft malicious DCM files and write arbitrary files on affected installations, bypassing proper validation checks. Authentication is not required to exploit this vulnerability. The vulnerability arises due to the failure to adequately sanitize user-supplied paths, leading to potential file system manipulation. This vulnerability, identified as ZDI-CAN-25309, can result in significant security implications for affected organizations.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.