Unscored severity · published Nov 18, 2013
CVE-2013-4425
The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows…
–
CVSS
0.4%
EPSS
No
On KEV
Description
The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 29% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OS
Osirix · Osirix-viewer
through 5.7; 0.2; 1.0; 1.1; 1.1.2; 1.2; +34 more · source: NVD
OM
Osirix MD · Osirix-viewer
through 2.7 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2013-4425
CVE.org
https://www.cve.org/CVERecord?id=CVE-2013-4425
archives.neohapsis.com
http://archives.neohapsis.com/archives/bugtraq/2013-11/0029.html
osvdb.org
http://osvdb.org/99518
www.securityfocus.com
http://www.securityfocus.com/bid/63566
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/88606