CVE-2025-2284
Published: 13 March 2025
Description
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
Security Summary
CVE-2025-2284 is a denial-of-service vulnerability in the "GetWebLoginCredentials" function within Sante PACS Server.exe. Published on 2025-03-13, it carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H) and is linked to CWE-824 (Access of Uninitialized Pointer).
The vulnerability can be exploited by an unauthenticated attacker over the network with low attack complexity and no user interaction required. Successful exploitation leads to a high-impact denial of service, disrupting availability of the affected service without affecting confidentiality or integrity.
Mitigation details are available in the Tenable advisory at https://www.tenable.com/security/research/tra-2025-08.
Details
- CWE(s)
MITRE ATT&CK Enterprise Techniques
Why these techniques?
The CVE describes a remote unauthenticated DoS via exploitation of an uninitialized pointer in a server application, directly enabling T1499.004 (Application or System Exploitation) for endpoint denial of service.