Filtered by vendor Zoll Subscriptions
Filtered by product Defibrillator Dashboard Subscriptions
Total 6 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2021-27485 1 Zoll 1 Defibrillator Dashboard 2024-08-03 7.5 High
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser.
CVE-2021-27489 1 Zoll 1 Defibrillator Dashboard 2024-08-03 8.8 High
ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute arbitrary commands.
CVE-2021-27487 1 Zoll 1 Defibrillator Dashboard 2024-08-03 5.5 Medium
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information.
CVE-2021-27483 1 Zoll 1 Defibrillator Dashboard 2024-08-03 7.8 High
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user.
CVE-2021-27479 1 Zoll 1 Defibrillator Dashboard 2024-08-03 5.4 Medium
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users.
CVE-2021-27481 1 Zoll 1 Defibrillator Dashboard 2024-08-03 5.5 Medium
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information.