PRIOn knowledge basePRION:CVE-2022-2120

HistoryJun 24, 2022 - 3:15 p.m.

Path traversal

2022-06-2415:15:00

PRIOn knowledge base

www.prio-n.com

9.6 High

AI Score

Confidence

High

0.003 Low

EPSS

Percentile

70.2%

JSON

OFFIS DCMTK’s (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.

CPENameOperatorVersion
dcmtklt3.6.7

CPE	Name	Operator	Version
	dcmtk	lt	3.6.7

References

www.cisa.gov/uscert/ics/advisories/icsma-22-174-01