CISA ICSMA-26-218-01: Medixant RadiAnt DICOM越界写入漏洞(CVE-2026-17264)

漏洞概述 漏洞名称: Medixant RadiAnt DICOM 发布日期: 2026年8月6日 警报代码: ICSMA-26-218-01 相关主题: 工业控制系统漏洞、工业控制系统 CVSS评分: v3.4.3 供应商: Medixant 设备: Medixant RadiAnt DICOM 漏洞类型: 越界写入（Out-of-bounds Write） 影响范围 关键基础设施部门: 医疗保健和公共卫生 部署国家/地区: 全球 公司总部位置: 波兰 受影响版本: RadiAnt DICOM <= 2025.2 修复方案 推荐实践: - 最小化所有控制系统设备和/或系统的网络暴露，确保它们不从互联网可访问。 - 将控制系统网络和远程设备置于防火墙后面，并与业务网络隔离。 - 当需要远程访问时，使用更安全的远程方法，如虚拟专用网络（VPNs），并确保VPN更新到最新版本。 - 组织在部署防御措施之前进行适当的影响分析和风险评估。 - 实施推荐的网络安全策略以主动防御ICS资产。 - 遵循内部程序并报告可疑恶意活动。 - 不要点击未请求电子邮件消息中的链接或打开附件。 其他信息 漏洞编号: CVE-2026-17264 致谢: banda, oriotie, ax123, jihyeon4725, lacroix, 和 minzu 向CISA报告了此漏洞。 修订历史: - 初始发布日期: 2026-08-06 - 修订版本: 1 - 摘要: 初始发布 标签 部门: 医疗保健和公共卫生部门 主题: 工业控制系统漏洞、工业控制系统 相关链接 相关公告: - Thermo Fisher Applied Biosystems Genetic Analyzers - OFFIS DCMTK Toolkit - pydicom pyenetdicom Library - OHIF Viewers DICOM 反馈 请分享您的想法，我们最近更新了匿名产品调查，欢迎提供反馈。 法律通知和使用条款 本产品受此通知和隐私及使用政策的约束。 页脚 CISA Central 1-844-Say-CISA contact@cisa.dhs.gov 其他链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 社交媒体 Facebook X LinkedIn YouTube RSS 官方声明 CISA.gov 是美国国土安全部的官方网站。 搜索 搜索框 导航栏 Topics Spotlight Resources & Tools News & Events Careers About 顶部导航 STAYING SECURE AT EVENTS NO-COST CYBER SERVICES SECURE YOUR BUSINESS KNOWN EXPLOITED VULNERABILITIES CATALOG REPORT A CYBER ISSUE 标志 America's Cyber Defense Agency NATIONAL COORDINATOR FOR CRITICAL INFRASTRUCTURE SECURITY AND RESILIENCE 页脚标志 CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY 页脚链接 CISA.gov An official website of the U.S. Department of Homeland Security 页脚社交媒体 Facebook X LinkedIn YouTube RSS 页脚联系信息 CISA Central 1-844-Say-CISA contact@cisa.dhs.gov 页脚其他链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚官方声明 CISA.gov 是美国国土安全部的官方网站。 页脚搜索 搜索框 页脚导航 Topics Spotlight Resources & Tools News & Events Careers About 页脚顶部导航 STAYING SECURE AT EVENTS NO-COST CYBER SERVICES SECURE YOUR BUSINESS KNOWN EXPLOITED VULNERABILITIES CATALOG REPORT A CYBER ISSUE 页脚标志 America's Cyber Defense Agency NATIONAL COORDINATOR FOR CRITICAL INFRASTRUCTURE SECURITY AND RESILIENCE 页脚标志 CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY 页脚联系信息 CISA Central 1-844-Say-CISA contact@cisa.dhs.gov 页脚其他链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚官方声明 CISA.gov 是美国国土安全部的官方网站。 页脚搜索 搜索框 页脚导航 Topics Spotlight Resources & Tools News & Events Careers About 页脚顶部导航 STAYING SECURE AT EVENTS NO-COST CYBER SERVICES SECURE YOUR BUSINESS KNOWN EXPLOITED VULNERABILITIES CATALOG REPORT A CYBER ISSUE 页脚标志 America's Cyber Defense Agency NATIONAL COORDINATOR FOR CRITICAL INFRASTRUCTURE SECURITY AND RESILIENCE 页脚标志 CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY 页脚联系信息 CISA Central 1-844-Say-CISA contact@cisa.dhs.gov 页脚其他链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚官方声明 CISA.gov 是美国国土安全部的官方网站。 页脚搜索 搜索框 页脚导航 Topics Spotlight Resources & Tools News & Events Careers About 页脚顶部导航 STAYING SECURE AT EVENTS NO-COST CYBER SERVICES SECURE YOUR BUSINESS KNOWN EXPLOITED VULNERABILITIES CATALOG REPORT A CYBER ISSUE 页脚标志 America's Cyber Defense Agency NATIONAL COORDINATOR FOR CRITICAL INFRASTRUCTURE SECURITY AND RESILIENCE 页脚标志 CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY 页脚联系信息 CISA Central 1-844-Say-CISA contact@cisa.dhs.gov 页脚其他链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚官方声明 CISA.gov 是美国国土安全部的官方网站。 页脚搜索 搜索框 页脚导航 Topics Spotlight Resources & Tools News & Events Careers About 页脚顶部导航 STAYING SECURE AT EVENTS NO-COST CYBER SERVICES SECURE YOUR BUSINESS KNOWN EXPLOITED VULNERABILITIES CATALOG REPORT A CYBER ISSUE 页脚标志 America's Cyber Defense Agency NATIONAL COORDINATOR FOR CRITICAL INFRASTRUCTURE SECURITY AND RESILIENCE 页脚标志 CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY 页脚联系信息 CISA Central 1-844-Say-CISA contact@cisa.dhs.gov 页脚其他链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House USA.gov Website Feedback 页脚官方声明 CISA.gov 是美国国土安全部的官方网站。 页脚搜索 搜索框 页脚导航 Topics Spotlight Resources & Tools News & Events Careers About 页脚顶部导航 STAYING SECURE AT EVENTS NO-COST CYBER SERVICES SECURE YOUR BUSINESS KNOWN EXPLOITED VULNERABILITIES CATALOG REPORT A CYBER ISSUE 页脚标志 America's Cyber Defense Agency NATIONAL COORDINATOR FOR CRITICAL INFRASTRUCTURE SECURITY AND RESILIENCE 页脚标志 CYBERSECURITY & INFRASTRUCTURE SECURITY AGENCY 页脚联系信息 CISA Central 1-844-Say-CISA contact@cisa.dhs.gov 页脚其他链接 About CISA Budget and Performance DHS.gov FOIA Requests No FEAR Act Office of Inspector General Privacy Policy Subscribe The White House

目标达成 感谢每一位支持者 — 我们达成了 100% 目标！

CISA ICSMA-26-218-01: Medixant RadiAnt DICOM越界写入漏洞(CVE-2026-17264)

目标达成感谢每一位支持者 — 我们达成了 100% 目标！