CVE-2025-27724

CRITICAL

A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker ...

Affects 1 product across 1 vendor.

CVSS 3.19.8
EPSS0.5%
Percentile44th
PatchUnknown
CVSS Vector — Plain English Remotely exploitable over the network, low complexity, no authentication required, no user interaction needed, impact contained to the vulnerable component, full confidentiality impact, full integrity impact, full availability impact.
CWE Weakness Definitions
CWE-284: Improper Access Control

Software does not restrict or incorrectly restricts access to a resource.

Related Attack Patterns (CAPEC)
CAPEC-478 Modification of Windows Service Configuration
via CWE-284
CAPEC-479 Malicious Root Certificate
via CWE-284
CAPEC-546 Incomplete Data Deletion in a Multi-Tenant Environment
via CWE-284
CAPEC-550 Install New Service
via CWE-284
CAPEC-551 Modify Existing Service
via CWE-284
Show all 17

Mapping is CWE-to-CAPEC per MITRE CAPEC 3.9.

◆ AI Analysis — automated analysis, not human-reviewed

A privilege escalation vulnerability in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840 allows an attacker to upload a malicious .php file, leading to elevated capabilities.

BSID: BS-2025-GLOBAL-249297-C • Model: /workspace/models/qwen2.5-coder-32b-instruct-bf16 • Confidence: HIGH

Is this CVE in your environment?

BreachSpider monitors your ICS/OT environment for vulnerabilities like this one. No agents or network access required. Free to start.

Check My Environment →
Frequently Asked Questions
What is CVE-2025-27724?
A privilege escalation vulnerability in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840 allows an attacker to upload a malicious .php file, leading to elevated capabilities.
What is the CVSS score for CVE-2025-27724?
CVE-2025-27724 has CVSS 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. EPSS: 0.5%.
Is CVE-2025-27724 actively exploited?
No confirmed active exploitation of CVE-2025-27724 as of 2026-05-30.
How do I remediate CVE-2025-27724?
Priority: IMMEDIATE.
What systems are affected by CVE-2025-27724?
CVE-2025-27724 affects Meddream Pacs Server.
Vulnerability Details
CVE IDCVE-2025-27724
BSIDBS-2025-GLOBAL-249297-C BreachSpider Global ID
CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Published2025-07-28
Last Modified2025-11-03
ICS Relevance15%
Weakness (CWE)
Improper Access Control
SourceNVD
Official Description

A privilege escalation vulnerability exists in the login.php functionality of meddream MedDream PACS Premium 7.3.3.840. A specially crafted .php file can lead to elevated capabilities. An attacker can upload a malicious file to trigger this vulnerability.

Source: NIST NVD / MITRE CVE Database

Attack Vector Analysis — CITED Relevance

An attacker can exploit this vulnerability by uploading a specially crafted .php file through the login.php functionality, which can result in unauthorized access and privilege escalation.

Exploitation Likelihood: CRITICAL

Affected Products
VendorProductAffected Versions
Meddream Pacs Server 7.3.2.840
Remediation

No official vendor advisory link on record. See the CVE record →

Threat Intelligence
● Threat Intelligence Validated: October 2026 | Threat Age: 444 Days
CISA known-exploitedNot in KEV catalog
Public ExploitNot confirmed
PoC CodeNot confirmed
AI Enrichment Record — provenance & audit hash
Model/workspace/models/qwen2.5-coder-32b-instruct-bf16
ConfidenceHIGH
Enriched At2026-05-24
SHA-512 Audit Hash448340441e64669ac6a564d30c6d3f1cfc7c17de589fb0bf4558c1df9392ccd123de7829cf73eaf8b32ec45dbe9a75ab20582d8cb0a829497bb4fa0e32c245f5
Related CVEs affecting Meddream
CVE-2025-3484 9.8 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Co... CVE-2025-26469 9.8 An incorrect default permissions vulnerability exists in the CServerSettings:... CVE-2020-37009 8.8 MedDream PACS Server 6.8.3.751 contains an authenticated remote code executio... CVE-2025-53912 8.1 An arbitrary file read vulnerability exists in the encapsulatedDoc functional... CVE-2025-3482 7.8 MedDream PACS Server DICOM File Parsing Stack-based Buffer Overflow Remote Co...
View all Meddream CVEs →

Critical Severity - Know Your Exposure

A CVSS 9.8 vulnerability in your ICS environment cannot wait. BreachSpider maps critical CVEs to your specific assets and tells you what to fix first.

Create a free account →