VulnerabilityModified
CVE-2022-2120
OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names.
CRITICAL 9.8EPSS 3.20%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (3.20%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 3.20% probability · 87th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-23, CWE-22
- Affected
- offis/dcmtk
- Source
- ics-cert@hq.dhs.gov
References
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-174-01Mitigation, Third Party Advisory, US Government Resource
- https://lists.debian.org/debian-lts-announce/2025/06/msg00025.html
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-174-01Mitigation, Third Party Advisory, US Government Resource
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.