Read the docs
TI-2021-08972 Aliases CVE-2021-27487GHSA-c549-7qq5-xm9g

Cleartext storage of sensitive information in ZOLL Defibrillator Dashboard

Priority LOW 24CWE-312Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-312.

Summary

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information.

Why it matters now

EPSS 0.00178 7th percentileScored 2026-11-07
Fix Fixed ZOLL Defibrillator Dashboard: 2.2

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
—ZOLL Defibrillator Dashboardbefore 2.22.2Patch availableCNA
  • ZOLL Defibrillator Dashboard Vendor— Affected before 2.2 Fixed in 2.2 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:zoll:defibrillator_dashboard:*:*:*:*:*:*:*:*before 2.2VulnerableZOLL
  • cpe:2.3:a:zoll:defibrillator_dashboard:*:*:*:*:*:*:*:* Versions before 2.2 Vulnerable ·ZOLL

Remediation

  • Fix · CNA ZOLL Defibrillator Dashboard Fixed in 2.2

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-27487
  2. 2026-10-03 Alias added: GHSA-c549-7qq5-xm9g

References

Advisory 1

  • TI-2021-08974 Unrestricted file upload in ZOLL Defibrillator Dashboard CVSS 3.1HIGH 8.8
  • TI-2021-08970 ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their… CVSS 3.1HIGH 7.5
  • TI-2021-08969 Improper privilege management in ZOLL Defibrillator Dashboard CVSS 3.1HIGH 7.8
  • TI-2021-08965 Cross-site scripting in ZOLL Defibrillator Dashboard CVSS 3.1MEDIUM 5.4
  • TI-2021-08967 Hard-coded credentials in ZOLL Defibrillator Dashboard CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences