CVE-2024-1228criticalCWE-259

CVE-2024-1228: critical vulnerability in Eurosoft Przychodnia

Hardcoded password in Eurosoft Przychodnia

Published · Updated

Follow this CVE+ Monitor Eurosoft Przychodnia

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.4%
Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations. This issue affects Eurosoft Przychodnia software before version 20240417.001 (from that version vulnerability is fixed).
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:H/SA:H/AU:Y/R:U/V:C/RE:M/U:Red
Affected products
EuroSoft Sp. z o. o. · Eurosoft Przychodnia