CVE-2025-0573

Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbitrary files on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of DCM files. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to write files in the context of the current user. Was ZDI-CAN-25309.

• CWE-22

• https://www.zerodayinitiative.com/advisories/ZDI-25-053/Third Party Advisory

Published

Jan 30, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0567A vulnerability classified as problematic was found in Epic …4.5
• CVE-2025-0568Sante PACS Server DCM File Parsing Memory Corruption Denial-…7.5
• CVE-2025-0569Sante PACS Server DCM File Parsing Memory Corruption Denial-…7.5
• CVE-2025-0570Sante PACS Server Web Portal DCM File Parsing Memory Corrupt…6.5
• CVE-2025-0571Sante PACS Server Web Portal DCM File Parsing Memory Corrupt…6.5
• CVE-2025-0572Sante PACS Server Web Portal DCM File Parsing Directory Trav…4.3
• CVE-2025-0574Sante PACS Server URL path Memory Corruption Denial-of-Servi…7.5
• CVE-2025-0575A vulnerability has been found in Union Bank of India Vyom 8…3.9
• CVE-2025-0576A vulnerability was found in Mobotix M15 4.3.4.83 and classi…6.9
• CVE-2025-0577An insufficient entropy vulnerability was found in glibc. Th…4.8
• CVE-2025-0578A vulnerability was found in Facile Sistemas Cloud Apps up t…5.3
• CVE-2025-0579A vulnerability was found in Shiprocket Module 3/4 on OpenCa…7.3