CVE-2025-24489

An attacker could exploit this vulnerability by uploading arbitrary files via a specific service, which could lead to system compromise.

Score

CVSS 3.1 6.3 Medium

Status

Deferred - ics-cert@hq.dhs.gov

Published

2025-08-21

Last modified

2025-08-21

Weaknesses

CWE-434

Affected products

• Infinitt Pacs System Manager (Infinitt Healthcare)

References

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-100-01