CVE-2018-7526

The CVE-2018-7526 vulnerability affects BeaconMedaes Scroll Medical Air Systems’ TotalAlert Web Application (software versions up to 4107600010.23). It arises from improper access control: a malicious actor can access information in the web application by requesting a specific URL without authent...

CVE-2018-7510

BeaconMedaes TotalAlert Scroll Medical Air Systems web application versions older than 4107600010.23 store passwords in plaintext in a file accessible without authentication (CWE-256). This CVE entry corresponds to Unprotected Storage of Credentials (CVE-2018-7510). Affected product: TotalAlert S...

CVE-2018-7518

The CVE-2018-7518 entry affects BeaconMedaes TotalAlert Scroll Medical Air Systems web application. Vulnerable component: TotalAlert Web Application; root cause: insufficient protection of credentials stored/transmitted by the integrated web server, enabling an attacker with network access to ret...