Orthanc DICOM software contains vulnerabilities that may be exploited to trigger denial-of-service conditions, leak sensitive information, or achieve remote code execution. The details do not specify affected versions or technical specifics of the vulnerabilities. No patch or remediation details are available, and the software is not a cloud service, so remediation depends on vendor updates. The threat is currently assessed as low severity with no known active exploitation.

Potential impacts include system crashes (denial-of-service), unauthorized disclosure of information, and execution of arbitrary code on affected Orthanc DICOM installations. However, the lack of known exploits in the wild and the low severity rating suggest limited immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until official fixes are available, monitor vendor communications for updates. No specific mitigations or workarounds are provided in the available information.