Back to Database
Status published
Critical
CVE-2016-4328
MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before...
Vulnerability Description
MEDHOST Perioperative Information Management System (aka PIMS or VPIMS) before 2015R1 has hardcoded credentials, which makes it easier for remote attackers to obtain sensitive information via direct requests to the application database server.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2016-4328
Credits & Attribution
No credits recorded in the NVD database.
References
More from medhost
View All →CVE-2017-11743
MEDHOST Connex contains a hard-coded Mirth Connect admin credential that...
Critical
9.8
CVE-2017-11694
MEDHOST Document Management System contains hard-coded credentials that are used...
Critical
9.1
CVE-2017-11693
MEDHOST Document Management System contains hard-coded credentials that are used...
Critical
9.1
CVE-2017-11614
MEDHOST Connex contains hard-coded credentials that are used for customer...
Critical
9.8
Affected Vendor
medhost
View all reports →Affected Software
perioperative information management system
Vulnerable Versions:
Unknown
Timeline
Official Publish:
June 10th, 2016
Last Modified:
August 6th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.