{
  "cveId": "CVE-2025-1002",
  "url": "https://patchblox.com/security/cve/CVE-2025-1002",
  "summary": "CVE-2025-1002 is fixed in MicroDicom DICOM Viewer on 1 platform by MicroDicom DICOM Viewer 2025.1 (version 2025.1), released January 30, 2025. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "MicroDicom DICOM Viewer Improper Certificate Validation",
  "description": "MicroDicom DICOM Viewer\u00A0version 2024.03\n\nfails to adequately verify the update server\u0027s certificate, which could make it possible for attackers in a privileged network position to alter network traffic and carry out a machine-in-the-middle (MITM) attack. This allows the attackers to modify the server\u0027s response and deliver a malicious update to the user.",
  "published": "2025-02-10T21:15:21Z",
  "severity": "",
  "cvss": 5.7,
  "cwe": "CWE-295: Improper Certificate Validation",
  "epss": 0.00108,
  "epssPercentile": 0.0121,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2025-1002",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "MicroDicom DICOM Viewer",
      "fixedVersion": "2025.1",
      "fix": "MicroDicom DICOM Viewer 2025.1",
      "url": "https://patchblox.com/security/fix/windows-app/microdicom.dicomviewer-2025.1",
      "released": "2025-01-30T00:00:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-08T00:53:09Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}