Unrated severityNVD Advisory· Published Jun 29, 2023· Updated Nov 26, 2024

CVE-2023-33466

Description

Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Orthanc Server/Orthanccpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: <1.12.0

Patches

Vulnerability mechanics

References

www.debian.org/security/2023/dsa-5473mitrevendor-advisory
lists.debian.org/debian-lts-announce/2023/09/msg00009.htmlmitremailing-list
discourse.orthanc-server.org/t/security-advisory-for-orthanc-deployments-running-versions-before-1-12-0/3568mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000