Loading HuntDB...

GHSA-78wf-p97g-f4jr

GitHub Security Advisory

⚠ Unreviewed CRITICAL Has CVE

Advisory Details

The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form. This could allow an attacker to obtain the password off the ventilator and use it to gain unauthorized access to the device, with clinician privileges.

Related CVEs

Key Information

GHSA ID
GHSA-78wf-p97g-f4jr
Published
November 15, 2024 12:31 AM
Last Modified
November 15, 2024 12:31 AM
CVSS Score
9.0 /10
Primary Ecosystem
Unknown
Primary Package
Unknown
GitHub Reviewed
✗ No

Dataset

Last updated: July 12, 2025 6:29 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.