What’s Vulnerable › Vulnerabilities

CVE-2025-1001: Medixant RadiAnt DICOM Viewer Improper Certificate Validation

• Severity: medium (CVSS 5.7 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-02-21 · updated 2026-06-17
• Weakness: CWE-295

Description

Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack (MITM). An attacker could modify the server's response and deliver a malicious update to the user.

Affected products

• Medixant RadiAnt DICOM Viewer: 2024.02

References

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-051-01
• https://www.radiantviewer.com/files/RadiAnt-2025.1-Setup.exe

Get alerted when CVE-2025-1001 or the next vulnerability affects your stack