Nuance PowerScribe Remote Code Execution Vulnerability
🔗 CVE IDs covered (1)
📋 Description
Deserialization of untrusted data in Nuance PowerScribe allows an unauthorized attacker to execute code over a network.
🎯 Affected products22
- Nuance PowerScribe 360 4.0
- Nuance PowerScribe 360 version 4.0.1
- Nuance PowerScribe 360 version 4.0.2
- Nuance PowerScribe 360 version 4.0.3
- Nuance PowerScribe 360 version 4.0.4
- Nuance PowerScribe 360 version 4.0.5
- Nuance PowerScribe 360 version 4.0.6
- Nuance PowerScribe 360 version 4.0.7
- Nuance PowerScribe 360 version 4.0.8
- Nuance PowerScribe 360 version 4.0.9
- Nuance PowerScribe One version 2019.1
- Nuance PowerScribe One version 2019.10
- Nuance PowerScribe One version 2019.2
- Nuance PowerScribe One version 2019.3
- Nuance PowerScribe One version 2019.4
- Nuance PowerScribe One version 2019.5
- Nuance PowerScribe One version 2019.6
- Nuance PowerScribe One version 2019.7
- Nuance PowerScribe One version 2019.8
- Nuance PowerScribe One version 2019.9
- PowerScribe One version 2023.1 SP2 Patch 11
- PowerScribe One version 2023.1 SP3 Patch 6
✅ Remediation
KBRelease Notes (Security Update) — fixed build 7.0.243.19 KBRelease Notes (Security Update) — fixed build 7.0.277.28 KBRelease Notes (Security Update) — fixed build 7.0.316.12 KBRelease Notes (Security Update) — fixed build 7.0.427.15 KBRelease Notes (Security Update) — fixed build 7.0.528.24 KBRelease Notes (Security Update) — fixed build 2019.1.96.6 KBRelease Notes (Security Update) — fixed build 2019.2.9.11 KBRelease Notes (Security Update) — fixed build 2019.3.16.21 KBRelease Notes (Security Update) — fixed build 7.0.11.49 KBRelease Notes (Security Update) — fixed build 7.0.111.68 KBRelease Notes (Security Update) — fixed build 7.0.154.18 KBRelease Notes (Security Update) — fixed build 7.0.197.10 KBRelease Notes (Security Update) — fixed build 7.0.212.10 KBRelease Notes (Security Update) — fixed build 2019.4.9.17 KBRelease Notes (Security Update) — fixed build 2019.5.14.40 KBRelease Notes (Security Update) — fixed build 2019.6.36.40 KBRelease Notes (Security Update) — fixed build 2019.7.107.26 KBRelease Notes (Security Update) — fixed build 2019.8.43.19 KBRelease Notes (Security Update) — fixed build 2019.9.31.23 KBRelease Notes (Security Update) — fixed build 2019.10.36.14 KBRelease Notes (Security Update) — fixed build 2023.2.3054 KBRelease Notes (Security Update) — fixed build 2023.3.9072
🔗 References (5)
- advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-26142
- patchhttps://nuance.my.site.com/NuanceHealthcareSupport/s/login/?ec=302&startURL=%2FNuanceHealthcareSupport%2Fs%2Farticle%2FPowerScribe-360-Reporting-Release-Notes-for-Version-4-x
- patchhttps://nuance.my.site.com/NuanceHealthcareSupport/s/article/PowerScribe-One-2019-Release-Notes
- patchhttps://nuance.my.site.com/NuanceHealthcareSupport/s/article/PowerScribe-360-Reporting-Release-Notes-for-Version-4-x
- patchhttps://nuance.my.site.com/NuanceHealthcareSupport/s/article/PowerScribe-One-Release-Notes