ZOLL records
8 published records for vendor zoll.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 0%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-255 Credentials Management Errors2
- CWE-257 Storing Passwords in a Recoverable Format1
- CWE-269 Improper Privilege Management1
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-321 Use of Hard-coded Cryptographic Key1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
The weakness classes this vendor ships most often: where to look.
CWEAll records
8 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2021-27489No exploit | ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file.zoll · defibrillator dashboard · CWE-434 | High8.8 | — | 1.2% | Jun 16, 2021 |
31Monitor | CVE-2021-27483No exploit | ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilegzoll · defibrillator dashboard · CWE-269 | High7.8 | — | 0.2% | Jun 16, 2021 |
30Monitor | CVE-2021-27485No exploit | ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allozoll · defibrillator dashboard · CWE-257 | High7.5 | — | 1.1% | Jun 16, 2021 |
22Monitor | CVE-2021-27487No exploit | ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext.zoll · defibrillator dashboard · CWE-312 | Medium5.5 | — | 0.1% | Jun 16, 2021 |
22Monitor | CVE-2021-27481No exploit | ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcodzoll · defibrillator dashboard · CWE-321 | Medium5.5 | — | 0.1% | Jun 16, 2021 |
21Monitor | CVE-2021-27479No exploit | ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters tozoll · defibrillator dashboard · CWE-79 | Medium5.4 | — | 0.5% | Jun 16, 2021 |
19Monitor | CVE-2007-6756No exploit | ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physicallyzoll · monitor\/defibrillator · CWE-255 | Medium4.9 | — | 0.4% | Aug 12, 2014 |
19Monitor | CVE-2013-7395No exploit | ZOLL Defibrillator / Monitor X Series has a default (1) supervisor password and (2) service password, which allows physically proximate attazoll · monitor\/defibrillator · CWE-255 | Medium4.9 | — | 0.3% | Aug 12, 2014 |
- CVE-2021-2748935Monitor
ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file.
HighCVSS 8.8No exploitEPSS 1%zoll · defibrillator dashboardJun 16, 2021
- CVE-2021-2748331Monitor
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privileg
HighCVSS 7.8No exploitEPSS 0%zoll · defibrillator dashboardJun 16, 2021
- CVE-2021-2748530Monitor
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allo
HighCVSS 7.5No exploitEPSS 1%zoll · defibrillator dashboardJun 16, 2021
- CVE-2021-2748722Monitor
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext.
MediumCVSS 5.5No exploitEPSS 0%zoll · defibrillator dashboardJun 16, 2021
- CVE-2021-2748122Monitor
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcod
MediumCVSS 5.5No exploitEPSS 0%zoll · defibrillator dashboardJun 16, 2021
- CVE-2021-2747921Monitor
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to
MediumCVSS 5.4No exploitEPSS 0%zoll · defibrillator dashboardJun 16, 2021
- CVE-2007-675619Monitor
ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically
MediumCVSS 4.9No exploitEPSS 0%zoll · monitor\/defibrillatorAug 12, 2014
- CVE-2013-739519Monitor
ZOLL Defibrillator / Monitor X Series has a default (1) supervisor password and (2) service password, which allows physically proximate atta
MediumCVSS 4.9No exploitEPSS 0%zoll · monitor\/defibrillatorAug 12, 2014