Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2024-50593: Elefant Service tool: Hard-coded password allows unauthorized access
CVE-2024-50593 · published 1 year ago
Summary
A security issue exists in the Elefant Service tool because its password is hardcoded, allowing an attacker with physical access to the computer to access restricted functions without permission. This could potentially allow unauthorized access to sensitive information. Medical offices using the Elefant Service tool should update to the latest version, which removes the hardcoded password.
Original advisory text
An attacker with local access to the medical office computer can
access restricted functions of the Elefant Service tool by using a
hard-coded "Hotline" password in the Elefant service binary, wh...
An attacker with local access to the medical office computer can
access restricted functions of the Elefant Service tool by using a
hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software.
access restricted functions of the Elefant Service tool by using a
hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software.
Internet-facing
14 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Type
CWE-798Use of Hard-coded Credentials
Timeline
Published8 Nov 2024
Updated30 Oct 2026
First seen7 Mar 2026
Sources
CVE-2024-50593 · NVD
Track software like this
Free during beta