CVE-2024-50588
CVE-2024-50588 allows unauthenticated attackers on the local network to gain remote database administrator (DBA) access to the Elefant Firebird database using default credentials. This vulnerability exposes sensitive data, including patient information and login credentials. An attacker could create and overwrite arbitrary files on the server filesystem with system-level privileges. Despite a CVSS score of 0, highlighting the lack of immediate remote exploitability, the SOCRadar Vulnerability Risk Score (SVRS) of 30 indicates a moderate risk considering real-world exploitability. Successful exploitation leads to full system compromise and data breach. This CVE is significant due to the potential impact on patient privacy and system integrity within medical environments. Organizations should immediately change default credentials and restrict network access to the database.
Indicators of Compromise
Exploits
News
Social Media
Affected Software
References
CWE Details
CVE Radar
Real-time CVE Intelligence & Vulnerability Management Platform
CVE Radar provides comprehensive vulnerability intelligence by monitoring CVE databases, security advisories, and threat feeds. Get instant updates on new vulnerabilities, exploit details, and mitigation strategies specific to your assets.