Vulnerabilities > Zoll
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2021-06-16 | CVE-2021-27479 | Cross-site Scripting vulnerability in Zoll Defibrillator Dashboard ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be executed by higher privilege users. | 3.5 |
| 2021-06-16 | CVE-2021-27483 | Incorrect Permission Assignment for Critical Resource vulnerability in Zoll Defibrillator Dashboard ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an administrative level user. | 4.6 |
| 2021-06-16 | CVE-2021-27485 | Storing Passwords in a Recoverable Format vulnerability in Zoll Defibrillator Dashboard ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credentials from the web browser. | 5.0 |
| 2021-06-16 | CVE-2021-27481 | Use of Hard-coded Credentials vulnerability in Zoll Defibrillator Dashboard ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. | 2.1 |
| 2021-06-16 | CVE-2021-27487 | Cleartext Storage of Sensitive Information vulnerability in Zoll Defibrillator Dashboard ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. | 2.1 |
| 2021-06-16 | CVE-2021-27489 | Unrestricted Upload of File with Dangerous Type vulnerability in Zoll Defibrillator Dashboard ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. | 6.5 |
| 2014-08-12 | CVE-2013-7395 | Credentials Management vulnerability in Zoll Monitor/Defibrillator X ZOLL Defibrillator / Monitor X Series has a default (1) supervisor password and (2) service password, which allows physically proximate attackers to modify device configuration and cause a denial of service (adverse human health effects). | 4.9 |
| 2014-08-12 | CVE-2007-6756 | Credentials Management vulnerability in Zoll Monitor/Defibrillator E/M/R ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically proximate attackers to modify device configuration and cause a denial of service (adverse human health effects). | 4.9 |