ZOLL kayıtları
zoll üreticisine ait 8 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-255 Credentials Management Errors2
- CWE-257 Storing Passwords in a Recoverable Format1
- CWE-269 Improper Privilege Management1
- CWE-312 Cleartext Storage of Sensitive Information1
- CWE-321 Use of Hard-coded Cryptographic Key1
- CWE-434 Unrestricted Upload of File with Dangerous Type1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
8 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
35İzleyin | CVE-2021-27489İstismar yok | ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file.zoll · defibrillator dashboard · CWE-434 | Yüksek8,8 | — | %1,3 | 16 Haz 2021 |
31İzleyin | CVE-2021-27483İstismar yok | ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilegzoll · defibrillator dashboard · CWE-269 | Yüksek7,8 | — | %0,2 | 16 Haz 2021 |
30İzleyin | CVE-2021-27485İstismar yok | ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allozoll · defibrillator dashboard · CWE-257 | Yüksek7,5 | — | %1,2 | 16 Haz 2021 |
22İzleyin | CVE-2021-27487İstismar yok | ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext.zoll · defibrillator dashboard · CWE-312 | Orta5,5 | — | %0,2 | 16 Haz 2021 |
22İzleyin | CVE-2021-27481İstismar yok | ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcodzoll · defibrillator dashboard · CWE-321 | Orta5,5 | — | %0,2 | 16 Haz 2021 |
21İzleyin | CVE-2021-27479İstismar yok | ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters tozoll · defibrillator dashboard · CWE-79 | Orta5,4 | — | %0,5 | 16 Haz 2021 |
19İzleyin | CVE-2007-6756İstismar yok | ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physicallyzoll · monitor\/defibrillator · CWE-255 | Orta4,9 | — | %0,4 | 12 Ağu 2014 |
19İzleyin | CVE-2013-7395İstismar yok | ZOLL Defibrillator / Monitor X Series has a default (1) supervisor password and (2) service password, which allows physically proximate attazoll · monitor\/defibrillator · CWE-255 | Orta4,9 | — | %0,4 | 12 Ağu 2014 |
- CVE-2021-2748935İzleyin
ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file.
YüksekCVSS 8,8İstismar yokEPSS %1zoll · defibrillator dashboard16 Haz 2021
- CVE-2021-2748331İzleyin
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privileg
YüksekCVSS 7,8İstismar yokEPSS %0zoll · defibrillator dashboard16 Haz 2021
- CVE-2021-2748530İzleyin
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allo
YüksekCVSS 7,5İstismar yokEPSS %1zoll · defibrillator dashboard16 Haz 2021
- CVE-2021-2748722İzleyin
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext.
OrtaCVSS 5,5İstismar yokEPSS %0zoll · defibrillator dashboard16 Haz 2021
- CVE-2021-2748122İzleyin
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcod
OrtaCVSS 5,5İstismar yokEPSS %0zoll · defibrillator dashboard16 Haz 2021
- CVE-2021-2747921İzleyin
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to
OrtaCVSS 5,4İstismar yokEPSS %1zoll · defibrillator dashboard16 Haz 2021
- CVE-2007-675619İzleyin
ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically
OrtaCVSS 4,9İstismar yokEPSS %0zoll · monitor\/defibrillator12 Ağu 2014
- CVE-2013-739519İzleyin
ZOLL Defibrillator / Monitor X Series has a default (1) supervisor password and (2) service password, which allows physically proximate atta
OrtaCVSS 4,9İstismar yokEPSS %0zoll · monitor\/defibrillator12 Ağu 2014