by Kastro
Paper/Archive/CVE-2024-50588

CVE-2024-50588

HASOMED Elefant — Unprotected Exposed Firebird Database with default credentials

EPSS 0.7%public exploitCVSS 9.8
critical.is priorityof 100
50
CVSS 9.8 (ADP)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 53.0.530 × 2010.6Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enables an attacker to create and overwrite arbitrary files on the server filesystem with the rights of the Firebird database ("NT AUTHORITY\SYSTEM").

Affected

ProductAffectedFixed inSource
Elefant<24.03.03–CNA
elefant< 24.03.0324.03.03CISA-ADP

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

writeupr.sec-consult.com/hasomedpatchhasomed.de/produkte/elefantrefseclists.org/fulldisclosure/2024/Nov/3