Read the docs
TI-2020-19144 Aliases CVE-2020-37009GHSA-hxfj-rc88-5v2p

MedDream PACS Server 6.8.3.751 - Remote Code Execution

Priority HIGH 73CWE-434Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
None
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA. Impact type from CWE-434.

Summary

MedDream PACS Server 6.8.3.751 contains an authenticated remote code execution vulnerability that allows authorized users to upload malicious PHP files. Attackers can exploit the uploadImage.php endpoint by authenticating and uploading a PHP shell to execute arbitrary system commands with elevated privileges.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00606 49th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
MedDreamMedDream PACS Server6.8.3.751—No fix listedCNA
  • MedDream PACS Server VendorMedDream Affected 6.8.3.751 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2020-37009
  2. 2026-10-03 Alias added: GHSA-hxfj-rc88-5v2p

References

Exploit 1

Other 1

  • TI-2018-15597 MedDream PACS Server Premium 6.7.1.1 SQL Injection via email CVSS 4.0HIGH 8.8
  • TI-2025-35927 Cross-site scripting in MedDream PACS Premium CVSS 3.1MEDIUM 6.1
  • TI-2025-03062 Stack-based buffer overflow in MedDream PACS Server CVSS 3.0CRITICAL 9.8
  • TI-2025-33783 An arbitrary file read vulnerability exists in the encapsulatedDoc functionality of… CVSS 3.1CRITICAL 9.6
  • TI-2025-20518 Improper access control in MedDream PACS Premium CVSS 3.1CRITICAL 9.8
  • TI-2025-19417 Incorrect permission assignment in MedDream PACS Premium CVSS 3.1CRITICAL 9.8
See all 39 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences