CVE-2024-50589

Summary

CVE-2024-50589 is a newly identified cybersecurity vulnerability that affects medical offices with unprotected Fast Healthcare Interoperability Resources (FHIR) APIs. An unauthenticated attacker, who has local network access, can exploit this vulnerability to gain unauthorized access to sensitive electronic health records (EHR) through FHIR API queries. This issue poses a significant risk to patient privacy, making it crucial for medical offices to secure their FHIR APIs with proper authentication mechanisms. Unpatched systems are at heightened risk, making prompt mitigation a priority.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.