Defibrillator Dashboard
by Zoll
CVEs (6)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2021-27483 | 0.00 | — | 0.00 | Jun 16, 2021 | ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user. | |||
| CVE-2021-27485 | 0.00 | — | 0.01 | Jun 16, 2021 | ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser. | |||
| CVE-2021-27479 | 0.00 | — | 0.01 | Jun 16, 2021 | ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users. | |||
| CVE-2021-27487 | 0.00 | — | 0.00 | Jun 16, 2021 | ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information. | |||
| CVE-2021-27481 | 0.00 | — | 0.00 | Jun 16, 2021 | ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information. | |||
| CVE-2021-27489 | 0.00 | — | 0.01 | Jun 16, 2021 | ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute arbitrary commands. |
- CVE-2021-27483Jun 16, 2021risk 0.00cvss —epss 0.00
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user.
- CVE-2021-27485Jun 16, 2021risk 0.00cvss —epss 0.01
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser.
- CVE-2021-27479Jun 16, 2021risk 0.00cvss —epss 0.01
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users.
- CVE-2021-27487Jun 16, 2021risk 0.00cvss —epss 0.00
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information.
- CVE-2021-27481Jun 16, 2021risk 0.00cvss —epss 0.00
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information.
- CVE-2021-27489Jun 16, 2021risk 0.00cvss —epss 0.01
ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute arbitrary commands.