Description
An unauthenticated attacker with access to the local network of the
medical office can query an unprotected Fast Healthcare Interoperability
Resources (FHIR) API to get access to sensitive electronic health
records (EHR).
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HASOMED | Elefant | <24.04.00 | — |
References
- https://r.sec-consult.com/hasomed third-party-advisory
- https://hasomed.de/produkte/elefant/ patch