Vulnerabilities > Zoll

DATE CVE VULNERABILITY TITLE RISK
2021-06-16 CVE-2021-27479 Unspecified vulnerability in Zoll Defibrillator Dashboard
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users.
network
low complexity
zoll
5.4
2021-06-16 CVE-2021-27483 Incorrect Permission Assignment for Critical Resource vulnerability in Zoll Defibrillator Dashboard
ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user.
local
low complexity
zoll CWE-732
7.8
2021-06-16 CVE-2021-27485 Unspecified vulnerability in Zoll Defibrillator Dashboard
ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser.
network
low complexity
zoll
7.5
2021-06-16 CVE-2021-27481 Use of Hard-coded Credentials vulnerability in Zoll Defibrillator Dashboard
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded.
local
low complexity
zoll CWE-798
5.5
2021-06-16 CVE-2021-27487 Unspecified vulnerability in Zoll Defibrillator Dashboard
ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext.
local
low complexity
zoll
5.5
2021-06-16 CVE-2021-27489 Unspecified vulnerability in Zoll Defibrillator Dashboard
ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file.
network
low complexity
zoll
8.8