ICS Medical Advisory: Santesoft Sante DICOM Viewer Pro

Here is a summary of the provided document:

Summary:

The document discusses a vulnerability in Santesoft's Sante DICOM Viewer Pro, with a CVSS v3 score of 7.8. The vulnerability is an Out-of-Bounds Read (CVE-2024-1453) that allows an attacker to disclose information and execute arbitrary code on affected installations of the product. The vulnerability affects versions 14.0.3 and prior of the product. Santesoft has released an updated version of the product, v14.0.4, and recommends updating. Users are advised to take measures to protect themselves from social engineering attacks and to perform proper impact analysis and risk assessment before deploying defensive measures.