CVE-2013-6945

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-12-04 · updated 2026-06-17
Weakness: CWE-264

Description

The M2M Broker in OSEHRA VistA, as distributed before September 30, 2013, allows attackers to bypass authentication and authorization to perform doctor-only actions and read or modify patient records via unspecified vectors related to a "logic flaw."

Affected products

Osehra Vista: all versions

References

http://www.darkreading.com/vulnerability/anatomy-of-an-electronic-health-record-e/240164441/
http://www.osehra.org/blog/m2m-broker-security-patch
http://www.osehra.org/blog/vista-patch-available-osehra
http://www.darkreading.com/vulnerability/anatomy-of-an-electronic-health-record-e/240164441/
http://www.osehra.org/blog/m2m-broker-security-patch
http://www.osehra.org/blog/vista-patch-available-osehra

Get alerted when CVE-2013-6945 or the next vulnerability affects your stack