Skip to content
OpenAdvisories

Product · HASOMED

Elefant

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.8
    CVE-2024-50593

    Hardcoded Service Password

    An attacker with local access to the medical office computer can access restricted functions of the Elefant Service tool by using a hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software.

    HASOMED Elefant
  • High 7.8
    CVE-2024-50590

    Local Privilege Escalation via Weak Service Binary Permissions

    Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\SYSTEM" by overwriting one of two Elefant service binaries with weak permissions. The default installation directory of Elefant is "C:\Elefa…

    HASOMED Elefant
  • High 7.5
    CVE-2024-50589

    Unprotected FHIR API

    An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources (FHIR) API to get access to sensitive electronic health records (EHR).

    HASOMED Elefant