What’s Vulnerable › Vulnerabilities

CVE-2024-50588: Unprotected Exposed Firebird Database with default credentials

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-11-08 · updated 2026-06-17
• Weakness: CWE-419

Description

An unauthenticated attacker with access to the local network of the medical office can use known default credentials to gain remote DBA access to the Elefant Firebird database. The data in the database includes patient data and login credentials among other sensitive data. In addition, this enables an attacker to create and overwrite arbitrary files on the server filesystem with the rights of the Firebird database ("NT AUTHORITY\SYSTEM").

Affected products

• HASOMED Elefant: before 24.03.03 — fixed in 24.03.03

How to fix

Upgrade to a fixed version: HASOMED Elefant 24.03.03. Check the vendor advisory for mitigations.

References

• https://hasomed.de/produkte/elefant/
• https://r.sec-consult.com/hasomed
• http://seclists.org/fulldisclosure/2024/Nov/3

Get alerted when CVE-2024-50588 or the next vulnerability affects your stack