EBM Technologies Uniweb/SoliPACS WebServer Missing Authentication Vulnerability

A missing authentication vulnerability has been identified in Uniweb/SoliPACS WebServer developed by EBM Technologies, specifically in versions through 12.1.2577. This vulnerability allows unauthenticated remote attackers to access certain pages and retrieve user group names, as well as account names and IP addresses, depending on the specific CVE reference.

Impact

Exploitation of this vulnerability could lead to unauthorized access to user group names, and in the case of CVE-2025-11671, also account names and IP addresses.

Remediation

Users are advised to update to a version later than 12.1.2577.