CVEs (6)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1Zoll 1Defibrillator Dashboard Nov 21, 2024 Jun 16, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser. |
1Zoll 1Defibrillator Dashboard Nov 21, 2024 Jun 16, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user. |
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users. |
1Zoll 1Defibrillator Dashboard Nov 21, 2024 Jun 16, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute arbitrary commands. |
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information. |
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information. |