CVE-2025-53912

Name of the Vulnerable Software and Affected Versions MedDream PACS Premium version 7.3.6.870

Description An arbitrary file read issue exists in the encapsulatedDoc functionality. A specially crafted HTTP request can lead to unauthorized file access. An attacker can send an HTTP request to the encapsulatedDoc endpoint to trigger this issue. The vulnerability allows reading any file on the server.

Recommendations MedDream PACS Premium version 7.3.6.870: As a temporary workaround, consider disabling the encapsulatedDoc endpoint until a patch is available.