Deserialization of untrusted data

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or...

CVE-2023-31222

CVE-2023-31222 affects Medtronic Paceart Optima, specifically versions 1.11 and earlier, where Deserialization of untrusted data via the Microsoft Messaging Queuing Service in Paceart Messaging Service can allow an unauthenticated, network-accessing attacker to impact a Paceart Optima cardiac dev...

CISA Releases Nine Industrial Control Systems Advisories

CISA released nine Industrial Control Systems ICS advisories on June 29, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-180-01 Delta Electronics InfraSuite Device Master ICSA-23-180-02 Schneider Electric...

Medtronic Paceart Optima System

1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: Medtronic Equipment: Paceart Optima System Vulnerability: Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could result in remote code execution or a...

Medtronic Paceart Optima code issue vulnerability

Medtronic Paceart Optima is a comprehensive workflow solution from Medtronic, Inc. to efficiently compile and manage patient cardiac device data. A security vulnerability exists in Medtronic Paceart Optima version 1.11 and prior versions that originates from a data deserialization issue in...

CVE-2023-31222: Deserialization of Untrusted Data

Deserialization of untrusted data in Microsoft Messaging Queuing Service in Medtronic's Paceart Optima versions 1.11 and earlier on Windows allows an unauthorized user to impact a healthcare delivery organization’s Paceart Optima system cardiac device causing data to be deleted, stolen, or...

PT-2023-3388 · Medtronic +1 · Paceart Optima +1

Name of the Vulnerable Software and Affected Versions: Medtronic's Paceart Optima versions 1.11 and earlier Description: The issue is related to the deserialization of untrusted data in the Microsoft Messaging Queuing Service of Medtronic's Paceart Optima system. This allows an unauthorized user ...

WordPress Optima Express + MarketBoost IDX Plugin Plugin <= 7.3.0 is vulnerable to Cross Site Scripting (XSS)

Software Optima Express + MarketBoost IDX Plugin Type Plugin Vulnerable versions = 7.3.0 Fixed in 7.3.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-30749 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID f3093396364d Credits...

optima-tour.ru Improper Access Control vulnerability OBB-2266957

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2021-13777

Name of the Vulnerable Software and Affected Versions: Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS affected versions not specified Description: The issue concerns an unauthenticated BLE Interface in Sloan SmartFaucets. This allows for...

CVE-2021-20107: Missing Authentication for Critical Function

There exists an unauthenticated BLE Interface in Sloan SmartFaucets including Optima EAF, Optima ETF/EBF, BASYS EFX, and Flushometers including SOLIS. The vulnerability allows for unauthenticated kinetic effects and information disclosure on the faucets. It is possible to use the Bluetooth Low...

optima-conseils.eu XSS vulnerability

Vulnerable URL: http://www.optima-conseils.eu/recherche/search.phtml?SearchInput=%3Cimg+src%3Dx+onerror%3Dprompt%28%2FXSSPOSED%2F%29%3E=Search Details: Description| Value ---|--- Patched:| Yes, at 25.07.2017 Latest check for patch:| 25.07.2017 18:18 GMT Vulnerability type:| XSS Vulnerability...

GE Healthcare Optima MR360 HIPAA Configuration Interface Built-in Account Vulnerability

GE Healthcare CADStream Server is a suite of applications used in the healthcare industry and provides automated analysis and reporting for magnetic resonance imaging. Built-in accounts exist for the GE Healthcare Optima MR360 HIPAA configuration interface, with the root account using the...

GE Healthcare Optima MR360 Built-in Account Vulnerability

The GE Healthcare Optima MR360 is a magnetic resonance imaging MRI system for the healthcare industry. The GE Healthcare Optima MR360 fails to properly verify login authentication, allowing remote attackers to exploit the vulnerability by submitting a special request to gain access...

GE Healthcare Optima Built-in Account Vulnerability

The GE Healthcare Optima CT680, CT540, CT640, and CT520 are General Electric Company's computed tomography products used in the medical industry. The GE Healthcare Optima CT680, CT540, CT640, and CT520 use a root account with the password 'bigguy', allowing remote attackers to take control of the...

optima-packaging-group.de XSS vulnerability

Vulnerable URL: http://optima-packaging-group.de/opg/pharma/de/misc/search.php5?searchvalue=asd%22%3E%3Csvg%20onload%3Dalert%28%2fXSSPOSED%2f%29%3E Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 21:56 GMT Vulnerability type:| XSS Vulnerability...

CVE-2010-5308

GE Healthcare Optima MR360 does not require authentication for the HIPAA emergency login procedure, which allows physically proximate users to gain access via an arbitrary username in the Emergency Login screen. NOTE: this might not qualify for inclusion in CVE if unauthenticated emergency access...

CVE-2010-5307

The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of 1 operator for the root account, 2 adw2.0 for the admin account, and 3 adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcode...

Hardcoded credentials

The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of 1 operator for the root account, 2 adw2.0 for the admin account, and 3 adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcode...

CVE-2010-5307

The HIPAA configuration interface in GE Healthcare Optima MR360 has a password of 1 operator for the root account, 2 adw2.0 for the admin account, and 3 adw2.0 for the sdc account, which has unspecified impact and attack vectors. NOTE: it is not clear whether these passwords are default, hardcode...