#advisory

OFFIS DCMTK Toolkit

Successful exploitation of these vulnerabilities could allow an attacker to write files, access unauthorized information, exhaust memory, or crash affected DCMTK client or server processes.

OHIF Viewers DICOM

Successful exploitation of this vulnerability in a custom integration version could allow an attacker to steal an authenticated clinician's token via a crafted link.

pydicom pynetdicom Library

Successful exploitation of this vulnerability could allow an unauthenticated attacker to write to arbitrary file paths.

Fourth Frontier Frontier X Mobile Application, Frontier X2

Successful exploitation of this vulnerability could allow an attacker to read and write arbitrary handle values and change clinical readings, which could result in taking control of the device and lead to patient harm.

Eppendorf BioFlo 320

Successful exploitation of this vulnerability could allow an attacker to gain full access to functionality and data with the bioreactor.

Apollo Pharmacy Blood Glucose Monitoring System APG-01 BT

Successful exploitation of these vulnerabilities could allow an attacker to obtain sensitive health-related information and prevent legitimate users from establishing a connection with the device.