PT-2021-17471 · Zoll · Zoll Defibrillator Dashboard

Published 2021-06-16 · Updated 2021-06-21 · CVE-2021-27485

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ZOLL Defibrillator Dashboard versions prior to 2.2

Description The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser.

Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue. As a temporary workaround, consider disabling the password storage feature to minimize the risk of exploitation. Restrict access to sensitive areas of the application to minimize the risk of credential retrieval.

Fix

Weakness Enumeration

CWE-257

Related Identifiers

CVE-2021-27485

Affected Products

Zoll Defibrillator Dashboard

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-27485 · Security Note
• https://osv.dev/vulnerability/CVE-2021-27485 · Vendor Advisory
• https://t.me/cvenotify/16444 · Telegram Post
• https://us-cert.cisa.gov/ics/advisories/icsma-21-161-01 · Note
• https://t.me/cibsecurity/25485 · Telegram Post