J4Care dcm4che
Plan PatchCVSS 9.1ICS-CERT ICSMA-26-288-02Oct 15, 2026
Healthcare
Attack path
Attack VectorNetwork
Auth RequiredNone
ComplexityLow
User InteractionNone needed
Summary
J4Care dcm4chee-arc-light contains multiple access control and authorization vulnerabilities (CWE-862, CWE-835, CWE-407, CWE-306) that allow unauthenticated network access to perform unauthorized operations. Successful exploitation could allow an attacker to delete stored medical images, disclose patient information, inject forged studies, reassign patient records, overwrite files, and cause a denial-of-service condition.
What this means
What could happen
An attacker with network access could delete medical images from your archive, expose patient information, forge or modify patient studies, reassign medical records between patients, and disrupt the availability of your imaging system. This compromises patient safety, privacy, and the integrity of medical records.
Who's at risk
Healthcare organizations using dcm4chee-arc-light DICOM image archive systems. This includes hospital radiology departments, medical imaging centers, and any healthcare facility that stores diagnostic imaging studies (CT, MRI, X-ray, ultrasound, etc.) in a dcm4chee-arc-light repository.
How it could be exploited
An attacker on the network sends requests to the dcm4chee-arc-light application without authentication. The lack of proper access controls allows the attacker to perform unauthorized operations directly against the DICOM image repository, including deletion, modification, and disclosure of medical imaging data and patient records.
Prerequisites
- Network access to dcm4chee-arc-light server (typically port 8080 or 8081)
- No valid credentials required
remotely exploitableno authentication requiredlow complexityaffects patient data and medical recordsaffects diagnostic imaging availability
Exploitability
Unlikely to be exploited — EPSS score 0.3%
Affected products (1)
ProductAffected VersionsFix Status
dcm4chee-arc-light: 5.35.15.35.1No fix yet
Remediation & Mitigation
0/3
Do now
0/2HOTFIXUpdate dcm4chee-arc-light to version 5.35.2 or later
WORKAROUNDRestrict network access to dcm4chee-arc-light to trusted workstations and systems only using firewall rules
Long-term hardening
0/1HARDENINGImplement network segmentation to isolate the medical imaging system from general enterprise networks
↑↓ Navigate · Esc Close
API:
/api/v1/advisories/004764c8-33f8-44ef-9bd8-321a96bb65cbGet OTPulse briefings by email
Advisory breakdowns and incident analyses for the people actually defending OT environments. Sent when there's something worth your attention, not on a schedule. Free, no account required.