Unscored CVE-2021-39376 EUVD-2021-25736GHSA-j5hv-g58x-hjwf

Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSI…

Published Aug 24, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Philips Healthcare Tasy Electronic Medical Record (EMR) 3.06 allows SQL injection via the CorCad_F2/executaConsultaEspecifico IE_CORPO_ASSIST or CD_USUARIO_CONVENIO parameter.

Advisories 1

ICSMA-21-308-01 Philips Tasy EMR CISA ICS & IT advisories · Nov 4, 2021

References

https://diesec.home.blog/2021/08/24/philips-tasy-emr-3-06-sql-injection-cve-2021-39375cve-2021-39376/