PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-54156 Santesoft CVE debrief

CVE-2025-54156 affects Santesoft Sante PACS Server and is documented by CISA as an issue where the Web Portal sends credential information without encryption. The advisory rates the issue HIGH (CVSS 7.4) and recommends updating to version 4.2.3 or later. Organizations using the portal should treat this as a credential-protection problem that needs prompt remediation.

Vendor
Santesoft
Product
Sante PACS Server
CVSS
HIGH 7.4
CISA KEV
Not listed in stored evidence
Original CVE published
2025-08-12
Original CVE updated
2025-08-12
Advisory published
2025-08-12
Advisory updated
2025-08-12

Who should care

Healthcare IT teams, PACS administrators, security teams, and operators running Sante PACS Server Web Portal instances, especially where credentials are entered or managed through the portal.

Technical summary

CISA’s CSAF advisory for ICSMA-25-224-01 states that the Sante PACS Server Web Portal sends credential information without encryption. The supplied CVSS vector is CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N, which indicates a network-reachable issue with no privileges or user interaction required, and potential high impact to confidentiality and integrity. The vendor remediation listed in the advisory is to update Sante PACS Server to Version 4.2.3 or later.

Defensive priority

High. Prioritize remediation promptly because the issue concerns credential transmission and is rated HIGH in the supplied advisory data.

Recommended defensive actions

  • Update Sante PACS Server to version 4.2.3 or later, as recommended by Santesoft.
  • Confirm the Web Portal is using encrypted transport for credential-related traffic.
  • Restrict access to the portal to trusted users and networks until the upgrade is complete.
  • Review authentication logs and reset affected credentials if there is any indication they may have been exposed.
  • Monitor the advisory references for any updated vendor or CISA guidance.

Evidence notes

Primary evidence comes from the CISA CSAF advisory for ICSMA-25-224-01 / CVE-2025-54156, which explicitly states: "The Sante PACS Server Web Portal sends credential information without encryption." The same advisory includes the vendor remediation to update PACS Server to Version 4.2.3 or later and provides the CVSS 3.1 vector CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N. The supplied timeline shows initial publication and modification on 2025-08-12.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-54156 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-54156

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-54156 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-54156

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2025/icsma-25-224-01.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-25-224-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ncas/tips/ST04-014

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.