CVEvulnerability
CVE-2018-7518
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-05-24
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-522
Description
In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, an attacker with network access to the integrated web server could retrieve default or user defined credentials stored and transmitted in an insecure manner.
Affected configurations
• beaconmedaes scroll medical air systems firmware (< 4107600010.23)
Related
Weakness · CWE (1)
- CWE-522 Insufficiently Protected Credentials weakness
References
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-144-01 Mitigation, Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSMA-18-144-01 Mitigation, Third Party Advisory, US Government Resource