Code injection

2019-09-0617:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

0.4%

JSON

A vulnerability was found in McKesson Cardiology product 13.x and 14.x. Insecure file permissions in the default installation may allow an attacker with local system access to execute unauthorized arbitrary code.

CPENameOperatorVersion
cardiology_firmwareeq14.1.0
cardiology_firmwareeq13.0
cardiology_firmwareeq14.0
horizon_cardiology_firmwarege12.0
horizon_cardiology_firmwarele12.2
horizon_cardiology_firmwareeq11.0

Name	Operator	Version
cardiology_firmware	eq	14.1.0
cardiology_firmware	eq	13.0
cardiology_firmware	eq	14.0
horizon_cardiology_firmware	ge	12.0
horizon_cardiology_firmware	le	12.2
horizon_cardiology_firmware	eq	11.0