PT-2021-17468 · Zoll · Zoll Defibrillator Dashboard

Published 2021-06-16 · Updated 2021-06-22 · CVE-2021-27481

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZOLL Defibrillator Dashboard versions prior to 2.2

Description The affected products use a hardcoded encryption key in the data exchange process. This could allow an attacker to gain access to sensitive information.

Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the data exchange process to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

CWE-321

Related Identifiers

CVE-2021-27481

Affected Products

Zoll Defibrillator Dashboard

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-27481 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27481 · Vendor Advisory
• https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01 · Note
• https://t.me/cvenotify/16690 · Telegram Post
• https://t.me/cvenotify/16441 · Telegram Post