CVE-2024-33606

CVE Enrichment

CVSS: 8.6 HIGH
EPSS: 0.46%
EPSS Percentile: 40.00%
CISA KEV: Not listed

Description

An attacker could retrieve sensitive files (medical images) as well as plant new medical images or overwrite existing medical images on a MicroDicom DICOM Viewer system. User interaction is required to exploit this vulnerability.

Technical Details

CVSS Version: 4.0
CNA / NVD Source: [email protected]
Published: 12-Jun-2024 04:15
Last Modified: 17-Jun-2026 14:32
EPSS Date: 2026-11-02
CWE: CWE-939, CWE-862

CVSS Vector


            CVSS:4.0                            AV:N /
                            AC:L /
                            AT:N /
                            PR:N /
                            UI:A /
                            VC:H /
                            VI:H /
                            VA:H /
                            SC:N /
                            SI:N /
                            SA:N /
                            E:X /
                            CR:X /
                            IR:X /
                            AR:X /
                            MAV:X /
                            MAC:X /
                            MAT:X /
                            MPR:X /
                            MUI:X /
                            MVC:X /
                            MVI:X /
                            MVA:X /
                            MSC:X /
                            MSI:X /
                            MSA:X /
                            S:X /
                            AU:X /
                            R:X /
                            V:X /
                            RE:X /
                            U:X

CNA Products / Version Status

microdicom · dicom_viewer Source: CNA · 134c704f-9b21-4f2e-91b3-4a467353bcc0
Default status: unknown

0 ≤ version < 2024.2 — affected (custom)

CPEs: cpe:2.3:a:microdicom:dicom_viewer:*:*:*:*:*:*:*:*
MicroDicom · DICOM Viewer Source: CNA · [email protected]
Default status: unaffected

0 ≤ version < 2024.2 — affected (custom)

Affected Products / Versions

microdicom / dicom_viewer Source: NVD CPE · affected
Version / affected range: * · before (exclusive) 2024.2
cpe:2.3:a:microdicom:dicom_viewer:*:*:*:*:*:*:*:*

References

CISA Advisory

Last enrichment sync: 09-Nov-2026 08:28
Sources: NVD · FIRST EPSS · CISA KEV
Latest successful provider update; providers refresh independently.

Reported Context (1)

CVE-2024-33606 (Improper Authorization Handler) Fake MicroDicom Site Distributed Installer With Persistent SSH Backdoor

CVE (1)

People (2)

MITRE ATT&CK (4)

Vendors (1)

Products (1)

Industries (1)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.