Back to Database
Status published
Unknown
CVE-2024-50593
Hardcoded Service Password
Vulnerability Description
An attacker with local access to the medical office computer can access restricted functions of the Elefant Service tool by using a hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2024-50593
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Tobias Niemann, SEC Consult Vulnerability Lab
- Daniel Hirschberger, SEC Consult Vulnerability Lab
- Florian Stuhlmann, SEC Consult Vulnerability Lab
More from HASOMED
View All →CVE-2024-50592
Local Privilege Escalation via Race Condition
Unknown
0
CVE-2024-50591
Local Privilege Escalation via Command Injection
Unknown
0
CVE-2024-50590
Local Privilege Escalation via Weak Service Binary Permissions
Unknown
0
CVE-2024-50589
Unprotected FHIR API
Unknown
0
CVE-2024-50588
Unprotected Exposed Firebird Database with default credentials
Unknown
0
Affected Vendor
HASOMED
View all reports →Affected Software
Elefant
Vulnerable Versions:
<24.03.03
Timeline
Official Publish:
November 8th, 2024
Last Modified:
November 3rd, 2025
Added to House:
July 22nd, 2026
CVSS Vectors
No vector data available