CGM NETRAAD SQL Injection Vulnerability in Imageserver Module

A SQL injection vulnerability has been identified in the 'imageserver' module of CGM NETRAAD software, affecting versions prior to 7.9.0. This vulnerability arises when the software processes C-FIND queries, allowing an attacker connected to the PACS to access the database. The exploitation of this vulnerability could lead to unauthorized access to data processed by CGM CLININET software.

Impact

Exploitation of this vulnerability allows for unauthorized database access, including sensitive information handled by the CGM CLININET software.