Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2025-2263

30
FAUCET Score

CVE-2025-2263 is a critical stack-based buffer overflow vulnerability affecting Sante PACS Server.exe during web server login. An unauthenticated remote attacker can exploit this by supplying a long encrypted username or password, leading to a buffer overflow when the OpenSSL EVP_DecryptUpdate function is called. With a CVSS score of 9.8 (CRITICAL), this vulnerability allows for complete compromise of confidentiality, integrity, and availability without user interaction. Currently, there is no public exploit code, Metasploit module, or significant community discussion, and it is not known to be actively exploited.

Impacted Technologies

VendorProductVersion(s)CPE
4.1.0CPE matchmatch criteria
cpe:2.3:a:santesoft:sante_pacs_server:4.1.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.85%
Probability of exploitation in next 30 days
EPSS Percentile
54.4%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0085 is in the 39th percentile among its peer group of 36,835 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (4)

azurevendor investigatingvia llm_extracted
dotnetvendor investigatingvia llm_extracted
langgeniusvendor investigatingvia llm_extracted
phoenix_contactvendor investigatingvia llm_extracted

Vendor Advisories (4)

langgeniusllm-langgenius-ec9256d13ee062b9CRITICAL

Multiple Vulnerabilities in Sante PACS Server

Mar 13, 2025
dotnetllm-dotnet-57c3c6ade4920c56CRITICAL

Multiple Vulnerabilities in Sante PACS Server

Mar 13, 2025
azurellm-azure-e5a889a678a4f11dCRITICAL

Multiple Vulnerabilities in Sante PACS Server

Mar 13, 2025
phoenix_contactllm-phoenix_contact-4ee81f8a613c7cfbCRITICAL

Multiple Vulnerabilities in Sante PACS Server

Mar 13, 2025

References

tenable.com / security/research/tra-2025-08
ExploitThird Party Advisory