High Severity Vulnerability Identified in Panoramic Dental Imaging Software
A high-severity vulnerability has been identified in Panoramic Dental Imaging Software that could allow a standard user to elevate privileges to NT Authority/SYSTEM.
The vulnerability, identified by Damian Semon Jr. of Blue Team Alpha LLC, affects Panoramic Corporation Dental Imaging Software v.9.1.2.7600, and is due to an uncontrolled search path element (CWE-427), which makes the product vulnerable to DLL hijacking. The vulnerability is tracked as CVE-2024-22774 and has been assigned a CVSS v4 base score of 8.5 (CVSS v3.1: 7.8).
The vulnerability affects an SDK component owned by Oy Ajat Ltd, which is no longer supported. A patch has not been released by Panoramic to correct the vulnerability, as it does not affect a component owned by Panoramic Corporation. No recommended mitigations have been released. Any users should contact Panoramic Corporation for further information via email at [email protected]
The vulnerability has been reported to the U.S. Cybersecurity and Infrastructure Security Agency (CISA) which recommends users take defensive measures, including minimizing network exposure by ensuring control system devices and systems are not exposed to the Internet, locating control system networks behind firewalls and isolating them from business networks, and ensuring secure methods are used when remote access is required, such as a virtual private network (VPN).
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
