Vulnerability · Published Nov 8, 2024 · Assigned by SEC-VLab
CVE-2024-50588Unprotected Exposed Firebird Database with default credentials
Critical 9.8
In plain English
A critical-severity security flaw in Elefant from HASOMED. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 53% of all known vulnerabilities).
Official description
An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enables an attacker to create and overwrite arbitrary files on the server filesystem with the rights of the Firebird database ("NT AUTHORITY\SYSTEM").
Affected products (as reported)
Weakness: CWE-1393, CWE-419 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H