MEDIUM🇵🇱 Wersja polska

CVE-2021-27481

CVSS 5.5v3.1pub. 2021-06-16upd. 2024-11-21

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information.

CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

  • Zoll Defibrillator Dashboard

    APP
    Zoll
    < 2.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
CWE
References

Related vulnerabilities

CVE-2021-27483HIGH7.8ten sam produkt

ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions tha...

CVE-2021-27485HIGH7.5ten sam produkt

ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recove...

CVE-2021-27489HIGH8.8ten sam produkt

ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a...

CVE-2021-27479MEDIUM5.4ten sam produkt

ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privileg...

CVE-2021-27487MEDIUM5.5ten sam produkt

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. T...