ZOLL Defibrillator Dashboard
Successful exploitation of these vulnerabilities could allow remote code execution, allow an attacker to gain access to credentials, or impact confidentiality, integrity, and availability of the application.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-27485US | high7.5 | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credential… | ||||
| CVE-2021-27483US | high7.8 | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an admi… | ||||
| CVE-2021-27479US | medium5.4 | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be execute… | ||||
| CVE-2021-27489US | high8.8 | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute… | ||||
| CVE-2021-27487US | medium5.5OT elevated | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information. | ||||
| CVE-2021-27481US | medium5.5OT elevated | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain… | ||||
references
External citations — patches, advisories, analysis.
remediations (6)
- FixedDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- FixedDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- FixedDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- FixedDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- FixedDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- FixedDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan