What’s Vulnerable › Vulnerabilities

CVE-2018-7510

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-06-06 · updated 2026-06-17
• Weakness: CWE-256

Description

In the web application in BeaconMedaes TotalAlert Scroll Medical Air Systems running software versions prior to 4107600010.23, passwords are presented in plaintext in a file that is accessible without authentication.

Affected products

• ICS-CERT BeaconMedæs TotalAlert Scroll Medical Air Systems web application: before 4107600010.23 — fixed in 4107600010.23

How to fix

Upgrade to a fixed version: ICS-CERT BeaconMedæs TotalAlert Scroll Medical Air Systems web application 4107600010.23. Check the vendor advisory for mitigations.

References

• https://ics-cert.us-cert.gov/advisories/ICSMA-18-144-01
• https://ics-cert.us-cert.gov/advisories/ICSMA-18-144-01

Get alerted when CVE-2018-7510 or the next vulnerability affects your stack