PT-2016-5122 · Patterson Dental · Patterson Dental Eaglesoft

Justin Shafer · Published 2016-04-01 · Updated 2016-04-04 · CVE-2016-2343

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Patterson Dental Eaglesoft version 17

Description The issue allows remote attackers to obtain sensitive patient information from the Dental.DB database. This is possible due to a hardcoded password for the dba account, which is set to sql. Attackers can exploit this by sending SQL statements to access the sensitive data.

Recommendations For Patterson Dental Eaglesoft version 17, change the hardcoded password of the dba account to a secure password to prevent unauthorized access. As a temporary workaround, consider restricting access to the database to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2016-2343

Affected Products

Patterson Dental Eaglesoft

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2016-2343 · Security Note
• https://osv.dev/vulnerability/CVE-2016-2343 · Vendor Advisory
• http://kb.cert.org/vuls/id/344432 · Note
• http://justinshafer.blogspot.com/2016/02/moving-onto-eaglesoft-aka-patterson.html · Note