================================================================ [1/2] Vulnerable target checks: PACS Scan 5.2.1 ================================================================ Product directory: /data/pruva/runs/02ae215a-af03-454a-a465-5525d65e97e6/bundle/artifacts/vendor_product/msi_extract/Program Files/Pacsgear/Pacsgear Image Exchange Service PGImageExchQueue.exe sha256=853e7ea4ac56cc85df9a21a81c993a36ac3bff803e35b7ba3aa7c1438a28525c PGImageExchangeQueueSvc.exe sha256=95c8fcb4a934dd809951916e74872ccce0cb8e201f3ad0508542c316be3d1299 -- Remoting registration anchors in PGImageExchQueue.exe -- 2613: .field public int32 RemotingPort 2655: IL_005c: stfld int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 7140: IL_002a: ldflda int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 7142: IL_0034: ldstr "/PGImageExchange" 14836: .field private class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel mRemoteChannel 16408: IL_000f: ldfld int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 16409: IL_0014: newobj instance void class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel::'.ctor'(int32) 16410: IL_0019: stfld class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel PGImageExchQueue.ExchangeForm::mRemoteChannel 16412: IL_001f: ldfld class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel PGImageExchQueue.ExchangeForm::mRemoteChannel 16416: IL_0027: ldstr "Unable to create TcpChannel on port " 16419: IL_0032: ldflda int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 16426: IL_0048: ldfld class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel PGImageExchQueue.ExchangeForm::mRemoteChannel 16427: IL_004d: callvirt instance object class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel::get_ChannelData() 16472: IL_009f: ldfld class [System.Runtime.Remoting]System.Runtime.Remoting.Channels.Tcp.TcpChannel PGImageExchQueue.ExchangeForm::mRemoteChannel 16474: IL_00a5: call void class [mscorlib]System.Runtime.Remoting.Channels.ChannelServices::RegisterChannel(class [mscorlib]System.Runtime.Remoting.Channels.IChannel, bool) 16492: IL_00df: ldstr "PGImageExchange" 16494: IL_00e5: call void class [mscorlib]System.Runtime.Remoting.RemotingConfiguration::RegisterWellKnownServiceType(class [mscorlib]System.Type, string, valuetype [mscorlib]System.Runtime.Remoting.WellKnownObjectMode) 16566: IL_0015: ldflda int32 PGImageExchQueue.CImageQueueSettings::RemotingPort 16568: IL_001f: ldstr "/PGImageExchange" [+] Parent vulnerable remoting surface statically confirmed. -- Service-hosted candidate anchors in PGImageExchangeQueueSvc.exe -- 30:.assembly 'PGImageExchangeQueueSvc' 79:.mresource public 'PGImageExchangeQueueSvc.ProjectInstaller.resources' 82:.mresource public 'PGImageExchangeQueueSvc.Service1.resources' 85:.module PGImageExchangeQueueSvc.exe // GUID = {21CAAC36-FA5C-46AD-9573-213C388ADB60} 88:.namespace PGImageExchangeQueueSvc 109: IL_0007: call instance void class PGImageExchangeQueueSvc.ProjectInstaller::InitializeComponent() 124: IL_0004: ldfld class [System]System.ComponentModel.IContainer PGImageExchangeQueueSvc.ProjectInstaller::components 128: IL_000c: ldfld class [System]System.ComponentModel.IContainer PGImageExchangeQueueSvc.ProjectInstaller::components 147: IL_0006: stfld class [System.ServiceProcess]System.ServiceProcess.ServiceProcessInstaller PGImageExchangeQueueSvc.ProjectInstaller::serviceProcessInstaller1 150: IL_0011: stfld class [System.ServiceProcess]System.ServiceProcess.ServiceInstaller PGImageExchangeQueueSvc.ProjectInstaller::serviceInstaller1 152: IL_0017: ldfld class [System.ServiceProcess]System.ServiceProcess.ServiceProcessInstaller PGImageExchangeQueueSvc.ProjectInstaller::serviceProcessInstaller1 156: IL_0023: ldfld class [System.ServiceProcess]System.ServiceProcess.ServiceProcessInstaller PGImageExchangeQueueSvc.ProjectInstaller::serviceProcessInstaller1 160: IL_002f: ldfld class [System.ServiceProcess]System.ServiceProcess.ServiceProcessInstaller PGImageExchangeQueueSvc.ProjectInstaller::serviceProcessInstaller1 164: IL_003b: ldfld class [System.ServiceProcess]System.ServiceProcess.ServiceInstaller PGImageExchangeQueueSvc.ProjectInstaller::serviceInstaller1 165: IL_0040: ldstr "PGImageExchange" 166: IL_0045: callvirt instance void class [System.ServiceProcess]System.ServiceProcess.ServiceInstaller::set_ServiceName(string) 175: IL_005a: ldfld class [System.ServiceProcess]System.ServiceProcess.ServiceProcessInstaller PGImageExchangeQueueSvc.ProjectInstaller::serviceProcessInstaller1 180: IL_0063: ldfld class [System.ServiceProcess]System.ServiceProcess.ServiceInstaller PGImageExchangeQueueSvc.ProjectInstaller::serviceInstaller1 187: } // end of class PGImageExchangeQueueSvc.ProjectInstaller 190:.namespace PGImageExchangeQueueSvc 193: extends [System.ServiceProcess]System.ServiceProcess.ServiceBase 195: .field private class [PGImageExchQueue]PGImageExchQueue.ExchangeForm mForm 207: IL_0001: call instance void class [System.ServiceProcess]System.ServiceProcess.ServiceBase::'.ctor'() 209: IL_0007: call instance void class PGImageExchangeQueueSvc.Service1::InitializeComponent() 215: instance default void Start () cil managed 222: IL_0001: newobj instance void class [PGImageExchQueue]PGImageExchQueue.ExchangeForm::'.ctor'() 223: IL_0006: stfld class [PGImageExchQueue]PGImageExchQueue.ExchangeForm PGImageExchangeQueueSvc.Service1::mForm 225: IL_000c: ldfld class [PGImageExchQueue]PGImageExchQueue.ExchangeForm PGImageExchangeQueueSvc.Service1::mForm 227: IL_0012: ldfld class [PGImageExchQueue]PGImageExchQueue.ExchangeForm PGImageExchangeQueueSvc.Service1::mForm 232: IL_0023: ldfld class [PGImageExchQueue]PGImageExchQueue.ExchangeForm PGImageExchangeQueueSvc.Service1::mForm 234: IL_0029: ldftn instance void class PGImageExchangeQueueSvc.Service1::mForm_OnExit(object) 235: IL_002f: newobj instance void class [PGImageExchQueue]PGImageExchQueue.ExchangeForm/ExitHandler::'.ctor'(object, native int) 236: IL_0034: callvirt instance void class [PGImageExchQueue]PGImageExchQueue.ExchangeForm::add_OnExit(class [PGImageExchQueue]PGImageExchQueue.ExchangeForm/ExitHandler) 238: IL_003a: ldfld class [PGImageExchQueue]PGImageExchQueue.ExchangeForm PGImageExchangeQueueSvc.Service1::mForm 250: } // end of method Service1::Start 260: IL_0001: call instance void class [System.ServiceProcess]System.ServiceProcess.ServiceBase::Stop() 266: instance default void OnStart (string[] args) cil managed 273: IL_0002: ldftn instance void class PGImageExchangeQueueSvc.Service1::Start() 274: IL_0008: newobj instance void class [mscorlib]System.Threading.ThreadStart::'.ctor'(object, native int) 275: IL_000d: newobj instance void class [mscorlib]System.Threading.Thread::'.ctor'(class [mscorlib]System.Threading.ThreadStart) 276: IL_0012: stfld class [mscorlib]System.Threading.Thread PGImageExchangeQueueSvc.Service1::thr 278: IL_0018: ldfld class [mscorlib]System.Threading.Thread PGImageExchangeQueueSvc.Service1::thr 282: IL_0024: ldfld class [mscorlib]System.Threading.Thread PGImageExchangeQueueSvc.Service1::thr 283: IL_0029: callvirt instance void class [mscorlib]System.Threading.Thread::Start() 285: } // end of method Service1::OnStart 308: IL_0004: ldfld class [System]System.ComponentModel.IContainer PGImageExchangeQueueSvc.Service1::components 312: IL_000c: ldfld class [System]System.ComponentModel.IContainer PGImageExchangeQueueSvc.Service1::components 316: IL_0018: call instance void class [System.ServiceProcess]System.ServiceProcess.ServiceBase::Dispose(bool) 328: IL_0001: ldstr "PGImageExchange" 329: IL_0006: call instance void class [System.ServiceProcess]System.ServiceProcess.ServiceBase::set_ServiceName(string) 333: } // end of class PGImageExchangeQueueSvc.Service1 336:.namespace PGImageExchangeQueueSvc 351: class [System.ServiceProcess]System.ServiceProcess.ServiceBase[] V_0, 352: class [System.ServiceProcess]System.ServiceProcess.ServiceBase[] V_1) 354: IL_0001: newarr [System.ServiceProcess]System.ServiceProcess.ServiceBase 358: IL_0009: newobj instance void class PGImageExchangeQueueSvc.Service1::'.ctor'() 363: IL_0012: call void class [System.ServiceProcess]System.ServiceProcess.ServiceBase::Run(class [System.ServiceProcess]System.ServiceProcess.ServiceBase[]) 367: } // end of class PGImageExchangeQueueSvc.Program [+] Service-hosted startup candidate statically confirmed: service creates PGImageExchQueue.ExchangeForm. -- Best-effort service OnStart runtime probe (candidate only) -- [-] Service-hosted candidate did not listen on TCP/22222 in this Wine harness; not claiming a runtime variant. ================================================================ [2/2] Fixed/latest target checks ================================================================ No public CVE-specific fixed PACS Scan build was identified; probing known newer package URLs. --- HEAD https://download.pacsgear.com/download/PacsSCAN5.2.2.zip HTTP/2 404 content-length: 1245 content-type: text/html --- HEAD https://download.pacsgear.com/download/PacsSCAN5.3.zip HTTP/2 200 content-length: 206934936 content-type: application/x-zip-compressed --- HEAD https://download.pacsgear.com/download/PacsSCAN5.3.1.zip HTTP/2 200 content-length: 270948341 content-type: application/x-zip-compressed --- HEAD https://download.pacsgear.com/download/PacsSCAN5.3.3.zip HTTP/2 200 content-length: 248222964 content-type: application/x-zip-compressed --- local newer package: /data/pruva/runs/02ae215a-af03-454a-a465-5525d65e97e6/bundle/vuln_variant/probe_5_3/PacsSCAN5.3.zip sha256=af0f9fa0c073abb047d6d79f3204ff7728558dde1df19bd8ff649842d2eac854 size=206934936 Archive: /data/pruva/runs/02ae215a-af03-454a-a465-5525d65e97e6/bundle/vuln_variant/probe_5_3/PacsSCAN5.3.zip 2651607 2017-03-21 04:53 PacsSCAN-Users-Manual.pdf 4056592 2017-03-21 05:38 setup.exe 430592 2017-03-21 04:53 32-Bit Shared/integrations/AMICAS/setup.exe 854751 2017-03-21 04:50 Quick Start Guides/PacsSCAN-Film-for-Mammography-Quick-Start-Guide-Letter-EN.pdf 839957 2017-03-21 04:50 Quick Start Guides/PacsSCAN-Film-Quick-Start-Guide-Letter-EN.pdf 871256 2017-03-21 04:50 Quick Start Guides/PacsSCAN-Film-System-Quick-Start-Guide-Letter-EN.pdf 829377 2017-03-21 06:29 Quick Start Guides/PacsSCAN-Quick-Start-Guide-Letter-EN.pdf 741822 2017-03-21 04:50 Quick Start Guides/PacsSCAN-Video-System-Quick-Start-Guide-Letter-EN.pdf No direct PGImageExchange string found in zip-level scan. --- local newer package: /data/pruva/runs/02ae215a-af03-454a-a465-5525d65e97e6/bundle/vuln_variant/probe_5_3_1/PacsSCAN5.3.1.zip sha256=d3fd059345d4881595817a1047f9d1e271415168d4ebd54271457f02c93462c5 size=270948341 Archive: /data/pruva/runs/02ae215a-af03-454a-a465-5525d65e97e6/bundle/vuln_variant/probe_5_3_1/PacsSCAN5.3.1.zip 430592 2018-01-12 10:45 32-Bit Shared/integrations/AMICAS/setup.exe 2649173 2018-01-12 10:45 PacsSCAN-Users-Manual.pdf 854751 2018-01-12 10:45 Quick Start Guides/PacsSCAN-Film-for-Mammography-Quick-Start-Guide-Letter-EN.pdf 839957 2018-01-12 10:45 Quick Start Guides/PacsSCAN-Film-Quick-Start-Guide-Letter-EN.pdf 871256 2018-01-12 10:45 Quick Start Guides/PacsSCAN-Film-System-Quick-Start-Guide-Letter-EN.pdf 829377 2018-01-12 10:45 Quick Start Guides/PacsSCAN-Quick-Start-Guide-Letter-EN.pdf 741822 2018-01-12 10:45 Quick Start Guides/PacsSCAN-Video-System-Quick-Start-Guide-Letter-EN.pdf 4175088 2018-01-12 10:51 setup.exe No direct PGImageExchange string found in zip-level scan. --- local newer package: /data/pruva/runs/02ae215a-af03-454a-a465-5525d65e97e6/bundle/vuln_variant/latest_533/PacsSCAN5.3.3.zip sha256=fbfbacca8c25900977af201e5699fe1cf45ab63fd7cd7d0640e6a0c014f88465 size=248222964 Archive: /data/pruva/runs/02ae215a-af03-454a-a465-5525d65e97e6/bundle/vuln_variant/latest_533/PacsSCAN5.3.3.zip 430592 2019-02-08 10:33 32-Bit Shared/integrations/AMICAS/setup.exe 244486368 2019-02-13 16:01 PacsSCAN Setup.exe 783449 2019-02-08 10:33 Quick Start Guides/PacsSCAN-Film-for-Mammography-Quick-Start-Guide-Letter-EN.pdf 310947 2019-02-08 10:33 Quick Start Guides/PacsSCAN-Film-Quick-Start-Guide-Letter-EN.pdf 753927 2019-02-08 10:33 Quick Start Guides/PacsSCAN-Film-System-Quick-Start-Guide-Letter-EN.pdf 309938 2019-02-08 10:33 Quick Start Guides/PacsSCAN-Quick-Start-Guide-Letter-EN.pdf 450747 2019-02-08 10:33 Quick Start Guides/PacsSCAN-Video-System-Quick-Start-Guide-Letter-EN.pdf No direct PGImageExchange string found in zip-level scan. ================================================================ RESULT ================================================================ variant_confirmed=false vulnerable_surface_confirmed=true service_static_candidate=true service_runtime_confirmed=false latest_check_done=true fixed_available=false