LIVE FEED
A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident. A proposed class action accuses University Hospitals of negligence after an October 22 cyberattack that took its MyChart portal offline; the Cleveland patient's suit, filed October 28, claims more than a million records were exposed, a number University Hospitals has not confirmed. University of New Mexico Health Sciences Center disclosed a cyberattack October 26 that diverted ambulances for about two hours; the BYOD extortion group claims it compromised 36,000 systems, a figure UNM has not confirmed. Philips updated its Node2Shell advisory October 27 for CVE-2026-111497, the Node.js Brotli decoder flaw it first flagged October 26 against PIC iX 4.x; the advisory still names no impacted products or fixed version. Philips updated its PHP2Shell advisory October 27 for CVE-2026-109618 and CVE-2026-109619, adding five more affected products including IntelliSpace Portal V12 and Philips Axon to the seven already listed. NorthShore Health Centers disclosed a data breach to patients October 27, one of several Midwest provider notifications issued that week. Denver Health Medical Plan notified more than 238,000 members October 26 about a vendor-related data incident.
Saturday, October 31, 2026 Issue #499  ·  Est. 2025
Independent brief for device makers
Manufacturers // MIM Software

MIM Software

MIM Software in MedDevice Cyber coverage: 3 stories, 3 products named, 3 CVEs, and the company's own disclosures.

Follow MIM SoftwareClaim this page
Stories
3
Products named
3
Product CVEs
3
Responses on record
0
Latest story
Jun 4, 2025

Coverage

3 stories
01
Vulnerability

MIM Admin Service RMI interface lets a local attacker run code as the service

MIM Software's advisory for CVE-2025-1701 rates the MIM Admin Service flaw high severity: a crafted request to its local RMI interface runs code with the service's privileges. Fixed in 7.2.13, 7.3.8 and 7.4.3.

MIM SoftwareJun 42 min read
02
Vulnerability

MIM Assistant and MIM Client 7.2.10 and 7.3.3 open to XXE through DICOM RT tags

MIM Software's advisory for CVE-2023-3892 says MIM Assistant and the MIM Client Application 7.2.10 and 7.3.3 process XML external entities hidden in DICOM RT object tags. Fixed in 7.2.11 and 7.3.4.

MIM SoftwareSep 192 min read
03
Vulnerability

MIM Concurrent License Server lets unauthenticated network attackers run code through RMI

MIM Software's advisory for CVE-2023-30262 says MIM Concurrent License Server and Local Concurrent License Server 6.5.0 to 7.0.9 deserialize untrusted RMI requests. Fixed in 7.0.10 and 7.1.0, with a hotfix for 6.5.x to 6.9.x.

MIM SoftwareJun 93 min read

Products in our coverage

  • MIM Admin Service < 7.2.13, < 7.3.8, < 7.4.3 medical imaging software service
  • MIM Assistant 7.2.10, 7.3.3 (also MIM Client Application) medical imaging workflow software
  • MIM Concurrent License Server 6.5.0 through 7.0.9 (also MIM Local Concurrent License Server) medical imaging software license server

Products and threat intel

9

MIM Software products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.

ProductDevice typeAttributesMatched advisories
Contour ProtégéAI+Radiological Image Processing Software For Radiation Therapy209
Contour ProtegeAIRadiological Image Processing Software For Radiation Therapy196
MIM - Additional TracersSystem, Image Processing, Radiological121
MIM - Centiloid ScalingSystem, Image Processing, Radiological100
MIM - Dose AnalysisSystem, Image Processing, Radiological130
MIM - LesionID ProSystem, Image Processing, Radiological90
MIM - Monte Carlo DosimetrySystem, Image Processing, Radiological140
MIM - Symphony HDR FusionSystem, Image Processing, Radiological150
MIM-AblationRadiological Image Processing Software For Ablation Therapy Planning And Evaluation100

CVEs in coverage of MIM Software products

CVE-2023-30262 CVE-2023-3892 CVE-2025-1701
← All manufacturers