ZOLL Defibrillator Dashboard
Successful exploitation of these vulnerabilities could allow remote code execution, allow an attacker to gain access to credentials, or impact confidentiality, integrity, and availability of the application.
beschreibt (6)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-27485US | high7.5 | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credential… | ||||
| CVE-2021-27483US | high7.8 | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an admi… | ||||
| CVE-2021-27479US | medium5.4 | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be execute… | ||||
| CVE-2021-27489US | high8.8 | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute… | ||||
| CVE-2021-27487US | medium5.5OT erhöht | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information. | ||||
| CVE-2021-27481US | medium5.5OT erhöht | — | ||
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (6)
- BehobenDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- BehobenDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- BehobenDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- BehobenDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- BehobenDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
- BehobenDefibrillator Dashboard
ZOLL recommends users disable the password autocomplete function on browsers accessing the Defibrillator Dashboard.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan