PT-2016-6974 · Dentsply Sirona · Cdr Dicom

Justin Shafer · Published 2016-09-21 · Updated 2016-11-28 · CVE-2016-6530

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Dentsply Sirona CDR Dicom versions 5 and earlier

Description The issue allows remote attackers to obtain administrative access by leveraging knowledge of default passwords for the sa and cdr accounts.

Recommendations For Dentsply Sirona CDR Dicom versions 5 and earlier, change the default passwords for the sa and cdr accounts to secure passwords.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

CVE-2016-6530

Affected Products

Cdr Dicom

References · 5

• https://osv.dev/vulnerability/CVE-2016-6530 · Vendor Advisory
• https://schickbysirona.com/items.php?itemid=19189 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-6530 · Security Note
• http://securityfocus.com/bid/92777 · Note
• http://kb.cert.org/vuls/id/548399 · Note