Read the docs
TI-2021-08967 Aliases CVE-2021-27481GHSA-9j75-pp4f-64p7

Hard-coded credentials in ZOLL Defibrillator Dashboard

Priority LOW 24CWE-321Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-321.

Summary

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain access to sensitive information.

Why it matters now

EPSS 0.00152 4th percentileScored 2026-11-07
Fix Fixed ZOLL Defibrillator Dashboard: 2.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—ZOLL Defibrillator Dashboardbefore 2.22.2Patch availableCNA
  • ZOLL Defibrillator Dashboard Vendor— Affected before 2.2 Fixed in 2.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:zoll:defibrillator_dashboard:*:*:*:*:*:*:*:*before 2.2VulnerableZOLL
  • cpe:2.3:a:zoll:defibrillator_dashboard:*:*:*:*:*:*:*:* Versions before 2.2 Vulnerable ·ZOLL

Remediation

  • Fix · CNA ZOLL Defibrillator Dashboard Fixed in 2.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-27481
  2. 2026-10-03 Alias added: GHSA-9j75-pp4f-64p7

References

Advisory 1

  • TI-2021-08974 Unrestricted file upload in ZOLL Defibrillator Dashboard CVSS 3.1HIGH 8.8
  • TI-2021-08970 ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their… CVSS 3.1HIGH 7.5
  • TI-2021-08969 Improper privilege management in ZOLL Defibrillator Dashboard CVSS 3.1HIGH 7.8
  • TI-2021-08965 Cross-site scripting in ZOLL Defibrillator Dashboard CVSS 3.1MEDIUM 5.4
  • TI-2021-08972 Cleartext storage of sensitive information in ZOLL Defibrillator Dashboard CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences