MedDream PACS Premium Incorrect Default Permissions Vulnerability Allowing Credential Decryption

A vulnerability exists in MedDream PACS Premium version 7.3.3.840 due to incorrect default permissions in the CServerSettings::SetRegistryValues function. This vulnerability allows a specially crafted application to decrypt credentials stored in a registry key related to configuration. An attacker could exploit this vulnerability by executing a malicious script or application.

Impact

Exploitation of this vulnerability allows for unauthorized access to decrypted database credentials, including the username and password, which could lead to full access to the associated database. If the database is on the same system as the MedDream server, the credentials are stored in plaintext in a file.

Remediation

MedDream has released a patch for this vulnerability. Users should update to the latest version.