CVE-2024-1228

CVE-2024-1228 involves a hard-coded password to the patients’ database in Eurosoft Przychodnia software. Connected Red Hat and related records confirm the vulnerability affects Eurosoft Przychodnia installations prior to version 20240417.001, where it is fixed in that release. The credential weak...

CVE-2024-1228 Hardcoded password in Eurosoft Przychodnia

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations. This issue affects Eurosoft Przychodnia software before version 20240417.001 from that version...

PT-2024-4063 · Veeam · Veeam Recovery Orchestrator

Name of the Vulnerable Software and Affected Versions: Veeam Recovery Orchestrator affected versions not specified Description: The issue is related to the use of hard-coded credentials in the Veeam Recovery Orchestrator web console, which can allow a remote attacker to bypass authentication and...

PT-2024-27238

Name of the Vulnerable Software and Affected Versions Simple Care software all versions Description The issue is related to the use of a hard-coded password for the patients' database, allowing an attacker to retrieve sensitive data. This password is uniform across all installations of the Simple...

PT-2024-17525

Name of the Vulnerable Software and Affected Versions Eurosoft Przychodnia versions prior to 20240417.001 Description The issue is related to the use of a hard-coded password for the patients' database, allowing an attacker to retrieve sensitive data. This password is uniform across all Eurosoft...

PT-2024-27234

Name of the Vulnerable Software and Affected Versions drEryk Gabinet versions 7.0.0.0 through 9.17.0.0 Description The issue is related to the use of a hard-coded password to access the patients' database, allowing an attacker to retrieve sensitive data. This password is uniform across all drEryk...

Estomed Sp. z o.o. Simple Care Security Vulnerability

Estomed Sp. z o.o. Simple Care is a full-featured healthcare management software from Estomed Sp. z o.o., Poland. A security vulnerability exists in Estomed Sp. z o.o. Simple Care that stems from the use of hard-coded passwords that could allow an attacker to access sensitive data stored in the...

drEryk Gabinet Security breach

drEryk Gabinet is a specialized software for clinics and NFZ offices from drEryk Poland. A security vulnerability exists in drEryk Gabinet versions 7.0.0.0 through 9.17.0.0, which stems from the use of hard-coded passwords for the database, allowing an attacker to retrieve sensitive data stored i...

Eurosoft Przychodnia Security Vulnerability

Eurosoft Przychodnia is a cloud clinic from Eurosoft Poland. A security vulnerability exists in Eurosoft Przychodnia versions prior to 20240417.001, which stems from the use of hard-coded passwords for the database, allowing an attacker to retrieve sensitive data stored in the database...

CVE-2024-3699: Use of Hard-coded Password

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all drEryk Gabinet installations.This issue affects drEryk Gabinet software versions from 7.0.0.0 through 9.17.0.0...

CVE-2024-3700: Use of Hard-coded Password

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Simple Care software installations. This issue affects Estomed Sp. z o.o. Simple Care software in all versions. The software is no longer...

CVE-2024-1228: Use of Hard-coded Password

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations. This issue affects Eurosoft Przychodnia software before version 20240417.001 from that version...

CVE-2023-49221

Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...

PT-2024-13696 · Precor · Precor P80 +2

Name of the Vulnerable Software and Affected Versions: Precor touchscreen console P62, P80, and P82 Description: The issue allows a remote attacker within the local network to bypass security restrictions and access the service menu due to a hard-coded service code. Recommendations: For Precor...

Dell PowerScale OneFS Trust Management Issue Vulnerability (CNVD-2024-29346)

Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. Dell PowerScale OneFS has a trust management issue vulnerability that stems from the presence of the use of hard-coded credentials, which can be exploited by an...

CVE-2023-49222: Use of Hard-coded Credentials

Precor touchscreen console P82 contains a private SSH key that corresponds to a default public key. A remote attacker could exploit this to gain root privileges...

CVE-2023-49223: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker to obtain sensitive information because the root password is stored in /etc/passwd. An attacker could exploit this to extract files and obtain sensitive information...

Precor Touchscreen Console Security Vulnerability

Precor touchscreen console P62 and Precor touchscreen console P82 are both a touchscreen console from Precor USA. A security vulnerability exists in the Precor Touchscreen Console that stems from the presence of hard-coded service code that could allow a remote attacker to bypass security...

CVE-2023-49224: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 contains a default SSH public key in the authorizedkeys file. A remote attacker could use this key to gain root privileges...

CVE-2023-49221: Use of Hard-coded Credentials

Precor touchscreen console P62, P80, and P82 could allow a remote attacker within the local network to bypass security restrictions, and access the service menu, because there is a hard-coded service code...