ICS Medical Advisory: Santesoft Sante FFT Imaging

Here is a summary of the provided document:

Summary:

A vulnerability has been identified in Santesoft's Sante FFT Imaging product, specifically versions v1.4.0 and prior, which allows an attacker to execute arbitrary code and disclose information through an out-of-bounds read vulnerability (CVE-2023-5059). The vulnerability has a CVSS v3 score of 7.8 and affects products worldwide. Santesoft has released an updated version, v1.4.1, and recommends users update to minimize the risk of exploitation. Mitigation measures include minimizing network exposure, isolating control systems, and using secure remote access methods. No known public exploitation has been reported, and the vulnerability is not remotely exploitable.