Description
An attacker with local access to the medical office computer can
access restricted functions of the Elefant Service tool by using a
hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| HASOMED | Elefant | <24.03.03 | — |
References
- https://r.sec-consult.com/hasomed third-party-advisory
- https://hasomed.de/produkte/elefant/ patch