CVE-2024-50589highCWE-306

CVE-2024-50589: high-severity vulnerability in HASOMED Elefant

Unprotected FHIR API

Published · Updated

Follow this CVE+ Monitor Elefant

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.5epss 0.6%
An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources (FHIR) API to get access to sensitive electronic health records (EHR).
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected products
HASOMED · Elefant
Related CVEs — HASOMED Elefant

In the same product, most dangerous first.

CVE-2024-50588CRITICALUnprotected Exposed Firebird Database with default credentialsEPSS 0.7%CVE-2024-50593HIGHHardcoded Service PasswordEPSS 0.2%CVE-2024-50590HIGHLocal Privilege Escalation via Weak Service Binary PermissionsEPSS 0.2%