CVE-2024-50588
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Nov 8, 2024
CWE ID 1393
CWE ID 419
Summary
CVE-2024-50588: An unauthenticated attacker with local network access to a medical office can exploit known default credentials to obtain remote DBA access to the Elefant Firebird database. This vulnerability poses a significant risk, as the database contains sensitive information such as patient data and login credentials. An attacker who successfully exploits this vulnerability can also manipulate files on the server with administrative privileges (NT AUTHORITY\\SYSTEM).
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Elefant