HASOMED records
6 published records for vendor HASOMED.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Pre-auth RCE: flaws that let an attacker run code over the network without an account. Median publish → KEV: the typical time between a record being published and CISA listing it as exploited.
Recurring classes
- CWE-250 Execution with Unnecessary Privileges1
- CWE-306 Missing Authentication for Critical Function1
- CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition1
- CWE-419 Unprotected Primary Channel1
- CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')1
- CWE-798 Use of Hard-coded Credentials1
The weakness classes this vendor ships most often: where to look.
CWEAll records
6 records| Action | CVE | Vulnerability | Severity | EPSS · Published |
|---|---|---|---|---|
39Monitor | CVE-2024-50588No exploit | Unprotected Exposed Firebird Database with default credentialshasomed · elefant · CWE-419 | Critical9.8 | 0.6%Nov 8, 2024 |
32Monitor | CVE-2024-50591No exploit | Local Privilege Escalation via Command Injectionhasomed · elefant software updater · CWE-77 | High7.8 | 1.9%Nov 8, 2024 |
31Monitor | CVE-2024-50590No exploit | Local Privilege Escalation via Weak Service Binary Permissionshasomed · elefant · CWE-250 | High7.8 | 0.1%Nov 8, 2024 |
31Monitor | CVE-2024-50593No exploit | Hardcoded Service Passwordhasomed · elefant · CWE-798 | High7.8 | 0.1%Nov 8, 2024 |
30Monitor | CVE-2024-50589No exploit | Unprotected FHIR APIhasomed · elefant · CWE-306 | High7.5 | 0.5%Nov 8, 2024 |
28Monitor | CVE-2024-50592No exploit | Local Privilege Escalation via Race Conditionhasomed · elefant software updater · CWE-367 | High7.0 | 0.1%Nov 8, 2024 |
- CVE-2024-5058839Monitor
Unprotected Exposed Firebird Database with default credentials
CriticalCVSS 9.8No exploitEPSS 0%hasomed · elefantNov 8, 2024
- CVE-2024-5059132Monitor
Local Privilege Escalation via Command Injection
HighCVSS 7.8No exploitEPSS 1%hasomed · elefant software updaterNov 8, 2024
- CVE-2024-5059031Monitor
Local Privilege Escalation via Weak Service Binary Permissions
HighCVSS 7.8No exploitEPSS 0%hasomed · elefantNov 8, 2024
- CVE-2024-5059331Monitor
Hardcoded Service Password
HighCVSS 7.8No exploitEPSS 0%hasomed · elefantNov 8, 2024
- CVE-2024-5058930Monitor
Unprotected FHIR API
HighCVSS 7.5No exploitEPSS 0%hasomed · elefantNov 8, 2024
- CVE-2024-5059228Monitor
Local Privilege Escalation via Race Condition
HighCVSS 7.0No exploitEPSS 0%hasomed · elefant software updaterNov 8, 2024