PT-2024-34342 · Unknown · Elefant Firebird

Daniel Hirschberger + 2 · Published 2024-11-08 · Updated 2024-11-13 · CVE-2024-50588

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Elefant Firebird database versions prior to 24.03.03

Description: An unauthenticated attacker with access to the local network of a medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. This access allows the attacker to view sensitive data, including patient data and login credentials. Additionally, the attacker can create and overwrite arbitrary files on the server filesystem with the rights of the Firebird database ("NT AUTHORITYSYSTEM").

Recommendations: For versions prior to 24.03.03, upgrade the affected component immediately to mitigate the risk of unauthorized access. As a temporary workaround, consider changing the default login credentials to prevent unauthorized access to the Elefant Firebird database. Restrict access to the database to minimize the risk of exploitation.

Fix

Weakness Enumeration

CWE-419

CWE-1393

Related Identifiers

CVE-2024-50588

Affected Products

Elefant Firebird

References · 9

• https://hasomed.de/produkte/elefant · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2024-50588 · Security Note
• http://seclists.org/fulldisclosure/2024/Nov/3 · Note
• https://twitter.com/oktsec/status/1854850769935073757 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1854872696745537543 · Twitter Post
• https://t.me/cvedetector/10190 · Telegram Post
• https://twitter.com/CVEnew/status/1854809021322293701 · Twitter Post
• https://twitter.com/cracbot/status/1856577810082738684 · Twitter Post
• https://r.sec-consult.com/hasomed · Note