ICS Medical Advisory: Santesoft Sante FFT Imaging

Here is a summary of the provided document:

Summary:

A vulnerability was discovered in Santesoft's Sante FFT Imaging software, affecting versions 1.4.1 and prior. The vulnerability, assigned CVE-2024-1696, is a locally exploitable out-of-bounds write that can allow arbitrary code execution when a user opens a malicious DCM file on an affected installation. The vulnerability has a CVSS v3.1 score of 7.8 and is considered high-severity. To mitigate this vulnerability, Santesoft recommends updating to version 1.4.2 or later, and users are advised to avoid opening suspicious email attachments and links. No public exploitation of this vulnerability has been reported at this time.