CVE-2024-5176

Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services with Stolen Credentials.This issue affects Welch Allyn Configuration Tool: versions 1.9.4.1 and prior.

CVSS

No CVSS.

References

Link	Resource
https://cisa.gov/news-events/ics-medical-advisories/icsma-24-151-01
https://cisa.gov/news-events/ics-medical-advisories/icsma-24-151-01

Configurations

No configuration.

History

21 Nov 2024, 09:47

Type	Values Removed	Values Added
References	~~() https://cisa.gov/news-events/ics-medical-advisories/icsma-24-151-01 -~~	() https://cisa.gov/news-events/ics-medical-advisories/icsma-24-151-01 -

05 Jun 2024, 15:15

Type	Values Removed	Values Added
Summary		(es) La vulnerabilidad de credenciales insuficientemente protegidas en la herramienta de configuración Baxter Welch Allyn puede permitir servicios remotos con credenciales robadas. Este problema afecta a la herramienta de configuración Welch Allyn: versiones 1.9.4.1 y anteriores.

31 May 2024, 18:15

Type	Values Removed	Values Added
New CVE

Information

Published : 2024-05-31 18:15

Updated : 2024-11-21 09:47

NVD link : CVE-2024-5176

Mitre link : CVE-2024-5176

CVE.ORG link : CVE-2024-5176

JSON object : View

Products Affected

No product.

CWE

CWE-522

Insufficiently Protected Credentials

{"id": "CVE-2024-5176", "metrics": {"cvssMetricV40": [{"type": "Secondary", "source": "productsecurity@baxter.com", "cvssData": {"safety": "NOT_DEFINED", "version": "4.0", "recovery": "NOT_DEFINED", "baseScore": 9.4, "automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "PASSIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "modifiedAttackVector": "NOT_DEFINED", "integrityRequirements": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "availabilityRequirements": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subsequentSystemIntegrity": "HIGH", "vulnerableSystemIntegrity": "HIGH", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "confidentialityRequirements": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "subsequentSystemAvailability": "LOW", "vulnerableSystemAvailability": "LOW", "subsequentSystemConfidentiality": "HIGH", "vulnerableSystemConfidentiality": "HIGH", "modifiedSubsequentSystemIntegrity": "NOT_DEFINED", "modifiedVulnerableSystemIntegrity": "NOT_DEFINED", "modifiedSubsequentSystemAvailability": "NOT_DEFINED", "modifiedVulnerableSystemAvailability": "NOT_DEFINED", "modifiedSubsequentSystemConfidentiality": "NOT_DEFINED", "modifiedVulnerableSystemConfidentiality": "NOT_DEFINED"}}]}, "published": "2024-05-31T18:15:13.280", "references": [{"url": "https://cisa.gov/news-events/ics-medical-advisories/icsma-24-151-01", "source": "productsecurity@baxter.com"}, {"url": "https://cisa.gov/news-events/ics-medical-advisories/icsma-24-151-01", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "productsecurity@baxter.com", "description": [{"lang": "en", "value": "CWE-522"}]}], "descriptions": [{"lang": "en", "value": "Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services with Stolen Credentials.This issue affects Welch Allyn Configuration Tool: versions 1.9.4.1 and prior."}, {"lang": "es", "value": "La vulnerabilidad de credenciales insuficientemente protegidas en la herramienta de configuraci\u00f3n Baxter Welch Allyn puede permitir servicios remotos con credenciales robadas. Este problema afecta a la herramienta de configuraci\u00f3n Welch Allyn: versiones 1.9.4.1 y anteriores."}], "lastModified": "2024-11-21T09:47:07.943", "sourceIdentifier": "productsecurity@baxter.com"}