Vulnerability Identified in Medixant RadiAnt DICOM Viewer
A vulnerability has been identified in the Medixant RadiAnt DICOM Viewer, a commonly used PACS DICOM viewer for medical images. The vulnerability is tracked as CVE-2025-1001 and is a medium-severity vulnerability with a CVSS v3.1 base score of 5.7 (v4 base score 5.7). The vulnerability affects RadiAnt DICOM Viewer version 2024.02 and is due to the update mechanism failing to verify the update server’s certificate. The vulnerability could be exploited in a machine-in-the-middle (MitM) attack, and successful exploitation could allow an attacker to modify the response from the server and deliver malicious updates to the user.
Medixant has addressed the issue and recommends users update their software to version v2025.1 or a later version. If any users are unable to apply the update, steps should be taken to prevent the vulnerability from being exploited.
The mitigations involve preventing any updates from being applied to the software. The display of available updates should be disabled via the command reg add “HKCU\Software\RadiAnt Viewer” /t REG_DWORD /v CheckUpdate /d 0 /f.
Users should not manually check for updates using the “Check for updates now” option from the toolbar menu, and any update notifications from the RadiAnt DICOM Viewer should be ignored. When the software update can be applied, users should download the latest version of the software directly from the web browser by visiting the Radiant Viewer website, https://www.radiantviewer.com, and should ensure they run an antivirus check on the update package before running it.
Get The FREE
HIPAA Compliance Checklist
Immediate Delivery of Checklist Link To Your Email Address
Please Enter Correct Email Address
Your Privacy Respected
HIPAA Journal Privacy Policy
The vulnerability was identified by security researcher Sharon Brizinov at Claroty Team82, who reported the vulnerability to the U.S. Cybersecurity and Infrastructure Security Agency (CISA). There is currently no evidence that the vulnerability has been exploited in the wild; however, users should ensure they update the software to the latest version as soon as possible or apply the recommended mitigations if the update cannot be performed immediately.
