[0day-rubbish] PacsOne Server 7.3.9 authenticated DICOMweb STOW-RS SOP Instance UID path traversal to www-data code execution on a PACS host (7.2)
PacsOne Server 7.3.9 DICOMweb path traversal can execute code as www-data.
The 0day Rubbish Research Team disclosed a vulnerability in RainbowFish Software PacsOne Server 7.3.9 Premium Edition for Linux x86-64, a commercial PACS and DICOM server. An authenticated DICOMweb STOW-RS SOP Instance UID path traversal can lead to code execution as www-data. The product combines a native C++ DICOM and HL7 service with a PHP web interface of 204 endpoints on MySQL and Apache. The claimed score is 7.2, with no CVE or observed exploitation stated.
- Affects PacsOne Server 7.3.9 Premium on Linux.
- Authenticated DICOMweb STOW-RS upload path traversal.
- Code execution as www-data on the PACS host.
- Claimed score 7.2; no exploitation in the wild stated.
- Vendors
- RainbowFish Software
- Products
- PacsOne Server
- Countries
- United States
From the original article
Posted by disclosure via Fulldisclosure on Oct 15 0day Rubbish Research Team is publicly disclosing a vulnerability in PacsOne Server 7. 3. 9, Premium Edition, Linux x86-64 distribution, the closed-source commercial PACS (medical imaging archive and DICOM server) from RainbowFish Software, California, United States.
seclists.org
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.