CVE-2013-4425: The DICOM listener in OsiriX before 5.8 and before 2.5-MD, when starting up, encrypts the TLS private key f...

Security readout for executives and security teams

OsiriX versions before 5.8 and before 2.5-MD used a hardcoded password to protect the DICOM listener TLS private key. A local user with access to the system could recover that private key, weakening trust around protected medical imaging communications. Exposure is most likely on workstations or servers running OsiriX before 5.8 or before 2.5-MD, especially where multiple local users or shared administrative access exist. Prioritize remediation where OsiriX handles sensitive clinical imaging or runs on shared systems. This is not evidenced as actively exploited, but exposed TLS private keys can undermine confidentiality and service trust. Mitigation focus: Upgrade OsiriX to 5.8, 2.5-MD, or later where applicable.; Regenerate and replace TLS private keys and certificates after upgrading.; Restrict local user access on systems running OsiriX..

Prepared

Jun 14, 2026, 15:13 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.