Critical severity9.8NVD Advisory· Published Mar 13, 2025· Updated Jun 17, 2026
CVE-2025-2263
CVE-2025-2263
Description
During login to the web server in "Sante PACS Server.exe", OpenSSL function EVP_DecryptUpdate is called to decrypt the username and password. A fixed 0x80-byte stack-based buffer is passed to the function as the output buffer. A stack-based buffer overflow exists if a long encrypted username or password is supplied by an unauthenticated remote attacker.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3cpe:2.3:a:santesoft:sante_pacs_server:4.1.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:santesoft:sante_pacs_server:4.1.0:*:*:*:*:*:*:*
- (no CPE)range: 4.1.0
Patches
Vulnerability mechanics
References
1- www.tenable.com/security/research/tra-2025-08nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.