Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2022-2120

OFFIS DCMTK Path Traversal

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OFFIS DCMTK

  • unspecified to < 3.6.7affected

References