BeaconMedaes TotalAlert Scroll Medical Air Systems

🗓️ 24 May 2018 00:00:00Reported by Industrial Control Systems Cyber Emergency Response TeamType

ics🔗 www.cisa.gov👁 42 Views

Vulnerabilities in BeaconMedaes TotalAlert Scroll Medical Air Systems web application. Vulnerabilities include improper access control, insufficiently protected credentials, and unprotected storage of credentials. Exploitation could lead to unauthorized access and potential modification of device and web application setup information. BeaconMedaes has released update 4107600010.24 to address these vulnerabilities.

Reporter	Title	Published	Views	Family All 18
CNVD	BeaconMedaes Scroll Medical Air Systems TotalAlert Web Application Information Disclosure Vulnerability (CNVD-2018-10605)	28 May 201800:00	–	cnvd
CNVD	BeaconMedaes Scroll Medical Air Systems TotalAlert Web Application Information Disclosure Vulnerability	28 May 201800:00	–	cnvd
CNVD	BeaconMedaes TotalAlert Scroll Medical Air Systems Information Disclosure Vulnerability	7 Jun 201800:00	–	cnvd
CVE	CVE-2018-7510	6 Jun 201820:00	–	cve
CVE	CVE-2018-7518	24 May 201820:00	–	cve
CVE	CVE-2018-7526	24 May 201820:00	–	cve
Cvelist	CVE-2018-7510	6 Jun 201820:00	–	cvelist
Cvelist	CVE-2018-7518	24 May 201820:00	–	cvelist
Cvelist	CVE-2018-7526	24 May 201820:00	–	cvelist
EUVD	EUVD-2018-19239	7 Oct 202500:30	–	euvd

Source	Link
raw	www.raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2018/icsma-18-144-01.json
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-18-144-01
cisa	www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
cisa	www.cisa.gov/news-events/ics-medical-advisories/icsma-18-144-01
cisa	www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf

24 May 2018 00:00Current

9.3High risk

Vulners AI Score9.3

CVSS 25

CVSS 39.8

EPSS0.00247