CVE-2013-4425

Published: Nov 18, 2013Modified: Apr 29, 2026

1.9

Vector

AV:L/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 3.4 / Impact: 2.9

Source: NVD

Description

The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key file using "SuperSecretPassword" as the hardcoded password, which allows local users to obtain the private key.

Affected (42)

Products: Osirix Viewer: Osirix, Osirix Md

Osirix Viewer

2 products

Osirix

Osirix Md

Configuration A

41 vulnerable

Vulnerable Software	Affected Versions
Osirix Viewer Osirix	version ≤ 5.7
Osirix Viewer Osirix	Version 0.2
Osirix Viewer Osirix	Version 1.0
Osirix Viewer Osirix	Version 1.1.2
Osirix Viewer Osirix	Version 1.1
Osirix Viewer Osirix	Version 1.2
Osirix Viewer Osirix	Version 1.3
Osirix Viewer Osirix	Version 1.4
Osirix Viewer Osirix	Version 1.5.1
Osirix Viewer Osirix	Version 1.5.2
Osirix Viewer Osirix	Version 1.5
Osirix Viewer Osirix	Version 1.6.2
Osirix Viewer Osirix	Version 1.6.3
Osirix Viewer Osirix	Version 1.6.4
Osirix Viewer Osirix	Version 1.6.5
Osirix Viewer Osirix	Version 1.6
Osirix Viewer Osirix	Version 1.7.1
Osirix Viewer Osirix	Version 1.7
Osirix Viewer Osirix	Version 2.0
Osirix Viewer Osirix	Version 2.1
Osirix Viewer Osirix	Version 2.2
Osirix Viewer Osirix	Version 2.3.1
Osirix Viewer Osirix	Version 2.3
Osirix Viewer Osirix	Version 2.4
Osirix Viewer Osirix	Version 2.5
Osirix Viewer Osirix	Version 2.6
Osirix Viewer Osirix	Version 2.7.5
Osirix Viewer Osirix	Version 3.0
Osirix Viewer Osirix	Version 3.1
Osirix Viewer Osirix	Version 3.2.1
Osirix Viewer Osirix	Version 3.3
Osirix Viewer Osirix	Version 3.5
Osirix Viewer Osirix	Version 3.6
Osirix Viewer Osirix	Version 3.7.1
Osirix Viewer Osirix	Version 3.8.1
Osirix Viewer Osirix	Version 3.9.4
Osirix Viewer Osirix	Version 4.0
Osirix Viewer Osirix	Version 4.1.2
Osirix Viewer Osirix	Version 5.0.2
Osirix Viewer Osirix	Version 5.5.2
Osirix Viewer Osirix	Version 5.6