CVE-2025-53912 — AI Deep Analysis Summary

🚨 **Essence**: MedDream PACS Premium has an **Arbitrary File Read** flaw in the `encapsulatedDoc` feature. <br>💥 **Consequences**: Attackers can read **any file** on the server.…

🛡️ **Root Cause**: **CWE-73** (External Control of File Name or Path). <br>🔍 **Flaw**: The `encapsulatedDoc` function fails to properly sanitize user input, allowing path traversal to access unauthorized files.

🏥 **Affected Vendor**: MedDream. <br>📦 **Product**: MedDream PACS Premium. <br>📌 **Version**: Specifically **7.3.6.870**. Check if your deployment matches this exact build.

🕵️ **Attacker Actions**: Read **arbitrary files** from the server filesystem. <br>🔑 **Privileges**: Requires **Low Privileges** (PR:L). <br>📊 **Impact**: High Confidentiality (C:H) and High Integrity (I:H) impact.…

⚖️ **Exploitation Threshold**: **Medium**. <br>🔐 **Auth Required**: Yes, **Low Privileges** (PR:L) are needed. <br>🌐 **Network**: Remote (AV:N). <br>🚫 **UI**: No User Interaction (UI:N). <br>📉 **Complexity**: Low (AC:L).

📢 **Public Exploit**: **No PoC available** in the provided data. <br>🌍 **Wild Exploitation**: Unknown. <br>🔗 **Reference**: See Talos Intelligence report (TALOS-2025-2273) for details.

🔍 **Self-Check**: Scan for **MedDream PACS Premium** instances. <br>🧪 **Test**: Specifically test the `encapsulatedDoc` endpoint for path traversal patterns (e.g., `../`).…

🛠️ **Official Fix**: **Patch Available**. <br>📅 **Published**: 2026-01-20. <br>✅ **Action**: Upgrade to a version newer than 7.3.6.870 or apply the vendor's security patch immediately.

🚧 **No Patch Workaround**: <br>1️⃣ **Isolate**: Restrict network access to the PACS server. <br>2️⃣ **WAF**: Deploy Web Application Firewall rules to block path traversal attempts in `encapsulatedDoc` requests.…

⚡ **Urgency**: **HIGH**. <br>🔥 **Priority**: Critical. <br>📉 **CVSS**: High severity (C:H, I:H). <br>🏥 **Risk**: Medical data privacy is paramount.…