GHSA-pggr-pwr5-55f8
GitHub Security Advisory
⚠ Unreviewed
CRITICAL
Has CVE
Advisory Details
There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password. An attacker could execute a brute-force attack to gain unauthorized access to the ventilator, and then make changes to device settings that could disrupt the function of the device and/or result in unauthorized information disclosure.
Related CVEs
Key Information
9.0
/10
Dataset
Last updated: July 9, 2025 6:27 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.