ICS Medical Advisory: MicroDicom DICOM Viewer

Here is a summary of the provided document:

View CSAF

Summary: A vulnerability in the MicroDicom DICOM Viewer medical image viewer has been identified, with a CVSS v3 score of 7.8. The vulnerabilities, a heap-based buffer overflow and out-of-bounds write, could allow an attacker to execute arbitrary code leading to memory corruption issues. The affected versions are 2023.3 (Build 9342) and prior. MicroDicom has released a fix and recommends upgrading to version 2024.1. CISA recommends minimizing network exposure, using secure remote access methods, and implementing defensive measures to minimize the risk of exploitation. No public exploitation has been reported.