High-Severity Vulnerability Patched in AJAT Panoramic Dental Imaging Software A critical security flaw in AJAT Panoramic Dental Imaging Software has been patched following its discovery by security researcher Damian Semon Jr. of Blue Team Alpha Inc. The vulnerability, tracked as CVE-2024-22774, affects versions prior to 6.6.1.490 and stems from an uncontrolled search path element, enabling DLL hijacking attacks. Exploiting this flaw could allow an attacker to escalate privileges to NT Authority/SYSTEM via the ccsservice.exe component, granting full control over affected systems. The bug carries a high-severity rating, with a CVSS v4 score of 8.5 and a CVSS v3.1 score of 7.8. The software, now owned by Varex Imaging (following its acquisition of Direct Conversion Ltd., formerly Oh AJAT Ltd.), has received a patch. Users are urged to apply the update by running the installation executable on all workstations running the affected software. The Cybersecurity and Infrastructure Security Agency (CISA) has acknowledged the vulnerability, recommending mitigations such as restricting software access behind firewalls, avoiding direct internet exposure, and using secure remote connections like VPNs when necessary.