Skip to content
OpenAdvisories
Critical ICSMA-21-161-01 6 CVEs

ZOLL Defibrillator Dashboard

Published Jun 10, 2021 · Updated Jun 10, 2021

Vendor: ZOLL Product: Defibrillator Dashboard

Summary

Successful exploitation of these vulnerabilities could allow remote code execution, allow an attacker to gain access to credentials, or impact confidentiality, integrity, and availability of the application.

Vulnerabilities 6

  • Unscored —
    CVE-2021-27479

    ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to…

  • Unscored —
    CVE-2021-27481

    ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange proc…

  • Unscored —
    CVE-2021-27483

    ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could a…

  • Unscored —
    CVE-2021-27485

    ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable for…

  • Unscored —
    CVE-2021-27487

    ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could…

  • Unscored —
    CVE-2021-27489

    ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a maliciou…

Revision history

  1. #1

    ICSMA-21-161-01 ZOLL Defibrillator Dashboard

References