VulnSocial

CVE-2025-1001Active Exploitation

LOWCVSS 5.7 · MEDIUM

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

  • Prioritize remediation for affected systems immediately
  • Assume compromise if assets are exposed
  • Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

Medixant RadiAnt DICOM Viewer is vulnerable due to failure of the update mechanism to verify the update server's certificate which could allow an attacker to alter network traffic and carry out a machine-in-the-middle attack (MITM). An attacker could modify the server's response and deliver a malicious update to the user.

Back to dashboard
3.5/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-295

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • Active exploitation appears in 1 classified signals
  • 1 mentions across 1 observed day

What's happening

  • Active exploitation reported across 1 signal
  • Technical details provided in 1 signal
  • 1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-08-07: 1Active Exploitation · 2026-08-07: 1Technical Details · 2026-08-07: 108-07
Signal classification1 categories
Active Exploitation
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • Aviatrix Threat Research Center@aviatrixtrc
    Active Exploitation

    TRC analysis shows attackers exploiting CVE-2025-1001 in RadiAnt DICOM Viewer perform MITM attacks during software updates to deliver malicious payloads. The compromised medical imaging software enables lateral movement across healthcare networks. Runtime segmentation helps contain post-compromise activity in critical infrastructure. #MedicalSecurity #ZeroTrust :link: Full TRC analysis: https://aviatrix.ai/threat-research-center/icsma-25-051-01-cve-2025-1001

    Post summary

    The post reports that CVE-2025-1001 is actively being exploited in RadiAnt DICOM Viewer installations, using MITM during updates to deliver malicious code, but it does not provide a PoC or remediation advice.

    0000057
    1.9K followersView on X

Explore more

Back to dashboard