High severity8.8NVD Advisory· Published Mar 1, 2024· Updated Apr 15, 2026

CVE-2024-25386

Description

Directory Traversal vulnerability in DICOM® Connectivity Framework by laurelbridge before v.2.7.6b allows a remote attacker to execute arbitrary code via the format_logfile.pl file.

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

gist.github.com/Shulelk/15c9ba8d6b54dd4256a50a24ac7dd0a2nvd
laurelbridge.com/security-notice-cve-2024-25386-potential-vulnerability/nvd
sec.1i6w31fen9.top/2024/02/02/dcf-operations-window-remote-command-execute/nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.008
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000