CRITICAL🇵🇱 Wersja polska

CVE-2018-7518

CVSS 9.8v3.0pub. 2018-05-24upd. 2024-11-21

In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, an attacker with network access to the integrated web server could retrieve default or user defined credentials stored and transmitted in an insecure manner.

CVSS Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Beaconmedaes Scroll Medical Air Systems

    HW
    Beaconmedaes
    all versions

  • Beaconmedaes Scroll Medical Air Systems Firmware

    OS
    Beaconmedaes
    < 4107600010.23
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2018-7510CRITICAL9.8PL ✓same product

BeaconMedaes TotalAlert — hasła w postaci jawnej bez uwierzytelnienia

CVE-2018-7526HIGH7.5same product

In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, by accessing...