INFINITT System Manager remote code execution via IModular.exe URI handler
A hospital imaging management program can be hacked through one malicious link!
Summary
The System Manager in INFINITT PACS can run arbitrary code when it handles a crafted imodular:// URI, with no login needed by the remote attacker. Versions 3.0.11.3 through 3.0.11.5 are affected.
What to do
No fixed version is named in the sources. Affected versions are 3.0.11.5 and older, so check that the product runs a version newer than 3.0.11.5 and read the vendor's advisory.
Products and platforms
CVE IDs
Times
First published
First seen