VYPR
← All advisories
High severity8.8NVD Advisory· Published Jun 29, 2023· Updated Jun 17, 2026

CVE-2023-33466

CVE-2023-33466

Description

Orthanc before 1.12.0 allows authenticated users with access to the Orthanc API to overwrite arbitrary files on the file system, and in specific deployment scenarios allows the attacker to overwrite the configuration, which can be exploited to trigger Remote Code Execution (RCE).

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Orthanc Server/Orthanc3 versions
    cpe:2.3:a:orthanc-server:orthanc:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:orthanc-server:orthanc:*:*:*:*:*:*:*:*range: <1.12.0
    • (no CPE)
    • (no CPE)range: <1.12.0

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.