CVE-2022-2120 — OFFIS DCMTK Path Traversal

CVE-2022-2120

OFFIS DCMTK Path Traversal PUBLISHED

Description (CNA)

OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into arbitrary directories under controlled names. This could allow remote code execution.

Affected (CNA)

Vendor / product	Versions
OFFIS / DCMTK	affected unspecified before 3.6.7

CWE

CWE-23

References

https://www.cisa.gov/uscert/ics/advisories/icsma-22-174-01

ADP enrichment

CVE

No English description supplied.

https://www.cisa.gov/uscert/ics/advisories/icsma-22-174-01
https://lists.debian.org/debian-lts-announce/2025/06/msg00025.html

CISA-ADP

No English description supplied.

No references supplied.