CNNVD-202510-1681 Information

CNNVD ID

CNNVD-202510-1681

CVE-2025-11672

  • CNNVD Published: 2025-10-13

Description (Chinese)

EBM Uniweb/SoliPACS WebServer是中国台湾商之器(EBM)公司的一个医学影像归档与通信系统。 EBM Uniweb/SoliPACS WebServer存在访问控制错误漏洞,该漏洞源于缺少身份验证,可能导致未经验证的远程攻击者访问特定页面获取用户组名称。

Description (English)

EBM Uniweb/SoliPACS WebServer is a medical image filing and communication system of the China Taiwan Business Enterprise (EBM). EBM Uniweb/SolipACS WebServer has an access control error that results from a lack of identification, which may lead uncertified remote assailants to access specific pages to acquire user group names.

Hazard Level

High

Vulnerability Type

访问控制错误

Affected Vendor

商之器

Published

2025-10-13

Last Modified

2026-02-24

References

https://www.twcert.org.tw/en/cp-139-10420-d1a4f-2.html https://www.twcert.org.tw/tw/cp-132-10419-de614-1.html

Patch

https://en.ebmtech.com/solipacs-web-viewer

Share on: