CVE-2024-48966
CriticalSummary
Narzędzia oprogramowania używane przez personel serwisowy do testowania i kalibracji wentylatora nie obsługują uwierzytelniania użytkowników. Atakujący z dostępem do komputera serwisowego, na którym zainstalowane są te narzędzia, może uzyskać informacje diagnostyczne lub manipulować ustawieniami wentylatora oraz oprogramowaniem wbudowanym bez konieczności uwierzytelnienia.
Risk Assessment
Brak uwierzytelniania stwarza ryzyko nieautoryzowanego ujawnienia informacji oraz potencjalnych niezamierzonych skutków w ustawieniach i wydajności urządzenia, co może zagrażać bezpieczeństwu pacjentów.
Recommendation
Zaleca się wprowadzenie mechanizmów uwierzytelniania dla narzędzi serwisowych oraz ograniczenie dostępu do komputera serwisowego, aby zminimalizować ryzyko nieautoryzowanego dostępu.
Related vulnerabilities
- CVE-2026-75865Critical
The WPLP Cookie Consent plugin for WordPress up to version 4.4.1 is vulnerable to arbitrary file upload due to missing file type validation in the saas_upload_logo() function combined with an authorization bypass on the WPLP connector REST endpoints. This allows unauthenticated attackers to upload arbitrary files on the server, potentially leading to remote code execution.
- CVE-2026-67394Critical
A critical local privilege escalation via OS command injection vulnerability has been discovered in Plesk for Linux, affecting versions from 18.0.34 before 18.0.79.9 and 18.0.80.5. It allows a customer or reseller with shell access to elevate privileges to the root account on the hosting server.
- CVE-2026-83524Critical
A command injection vulnerability was detected in RedPort Optimizer wXa-203, wXa-213, and wXa-223 up to 20260704, affecting the exec function of the file /xgatev1/system/datetime.php in the System Clock component. The attack can be initiated remotely, and the exploit has been publicly disclosed.
- CVE-2026-82971Critical
A command injection vulnerability was found in QVidium Opera11 version 3.3.2a26-Ax4x-opera11, affecting an unknown part of the file /cgi-bin/net_tr.cgi in the CGI Script component, through manipulation of the ipaddr argument. The attack can be initiated remotely, and the exploit has been publicly disclosed. The vendor has ceased operations and no longer supports these products.
- CVE-2026-82954Critical
A path traversal vulnerability was detected in Dokploy up to version 0.29.7, affecting the writeTraefikConfigInPath function in the file packages/server/src/utils/traefik/application.ts of the Settings component, through manipulation of the path argument. The attack can be launched remotely, and the exploit is public.
- CVE-2026-82226Critical
An unauthenticated PHP Object Injection vulnerability was detected in Tickera versions up to 3.6.0.2. This vulnerability may allow an attacker to execute arbitrary code or perform other unauthorized actions.
- CVE-2026-81780Critical
An unauthenticated Arbitrary File Upload vulnerability was detected in Hash Form versions up to 1.4.2. This vulnerability may allow an attacker to upload malicious files to the server.
- CVE-2026-81779Critical
An improper validation of specified quantity in input vulnerability was detected in the Newspapers X theme from version 1.0.46 through 1.0.48, allowing malicious software to be implanted.
- CVE-2026-81763Critical
An unauthenticated SQL Injection vulnerability was detected in Throws SPAM Away versions up to 3.8.2. This vulnerability may allow an attacker to manipulate database queries.
- CVE-2026-81756Critical
An unauthenticated SQL Injection vulnerability was detected in Smart Marketing SMS and Newsletters Forms versions up to 5.1.24. This vulnerability may allow an attacker to manipulate database queries.
Original NVD description (English source)
The software tools used by service personnel to test & calibrate the ventilator do not support user authentication. An attacker with access to the Service PC where the tools are installed could obtain diagnostic information through the test tool or manipulate the ventilator's settings and embedded software via the calibration tool, without having to authenticate to either tool. This could result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance.