Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Priority LOW 34

ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00231 Published 2021-06-16 Fixed in 2.2 CWE-269
Priority LOW 25

ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users.

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.00539 Published 2021-06-16 Fixed in 2.2 CWE-79
Priority LOW 24

ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00152 Published 2021-06-16 Fixed in 2.2 CWE-321
Priority MEDIUM 41

ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01291 Published 2021-06-16 Fixed in 2.2 CWE-434