CVE-2024-28877

CVE Enrichment

CVSS: 8.7 HIGH
EPSS: 0.68%
EPSS Percentile: 52.41%
CISA KEV: Not listed

Description

MicroDicom DICOM Viewer is vulnerable to a stack-based buffer overflow, which may allow an attacker to execute arbitrary code on affected installations of DICOM Viewer. User interaction is required to exploit this vulnerability.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 12-Jun-2024 04:15
Last Modified: 17-Jun-2026 14:21
EPSS Date: 2026-11-02
CWE: CWE-121, CWE-787

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:L /
                            AT:N /
                            PR:N /
                            UI:P /
                            VC:H /
                            VI:H /
                            VA:H /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

CNA Products / Version Status

microdicom · dicom_viewer Source: CNA · 134c704f-9b21-4f2e-91b3-4a467353bcc0
Default status: unknown

0 ≤ version < 2024.2 — affected (custom)

CPEs: cpe:2.3:a:microdicom:dicom_viewer:*:*:*:*:*:*:*:*
MicroDicom · DICOM Viewer Source: CNA · [email protected]
Default status: unaffected

0 ≤ version < 2024.2 — affected (custom)

Affected Products / Versions

microdicom / dicom_viewer Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 2024.2
cpe:2.3:a:microdicom:dicom_viewer:*:*:*:*:*:*:*:*

References

CISA Advisory

Last enrichment sync: 09-Nov-2026 08:31
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

CVE-2024-28877 (Stack-Based Buffer Overflow) Fake MicroDicom Site Distributed Installer With Persistent SSH Backdoor

CVE (1)

People (2)

MITRE ATT&CK (4)

Vendors (1)

Products (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.