{"id":"CVE-2024-50588","aliases":["EUVD-2024-44965","GHSA-8xpw-v6vw-79jf"],"status":"published","title":"Unprotected Exposed Firebird Database with default credentials","description":"An unauthenticated attacker with access to the local network of the \nmedical office can use known default credentials to gain remote DBA \naccess to the Elefant Firebird database. The data in the database \nincludes patient data and login credentials among other sensitive data. \nIn addition, this enables an attacker to create and overwrite arbitrary \nfiles on the server filesystem with the rights of the Firebird database \n(\"NT AUTHORITY\\SYSTEM\").","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00696,"percentile":0.53492,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-1393","CWE-419"],"published":"2024-11-08T08:37:03Z","modified":"2026-06-17T08:04:45Z","products":[{"vendor":"hasomed","product":"elefant"}],"references":[{"url":"https://r.sec-consult.com/hasomed","tags":["third-party-advisory"]},{"url":"https://hasomed.de/produkte/elefant/","tags":["patch"]},{"url":"http://seclists.org/fulldisclosure/2024/Nov/3"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-50588"},{"url":"https://hasomed.de/produkte/elefant"},{"url":"https://github.com/advisories/GHSA-8xpw-v6vw-79jf"}],"sources":{"cve":[{"id":"CVE-2024-50588","title":"Unprotected Exposed Firebird Database with default credentials","description":"An unauthenticated attacker with access to the local network of the \nmedical office can use known default credentials to gain remote DBA \naccess to the Elefant Firebird database. The data in the database \nincludes patient data and login credentials among other sensitive data. \nIn addition, this enables an attacker to create and overwrite arbitrary \nfiles on the server filesystem with the rights of the Firebird database \n(\"NT AUTHORITY\\SYSTEM\").","status":"published","published":"2024-11-08T08:37:03.702Z","modified":"2025-11-03T22:28:24.055Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-1393","CWE-419"],"updated_at":"2026-11-02T14:34:22.153872Z"}],"euvd":[{"id":"EUVD-2024-44965","description":"An unauthenticated attacker with access to the local network of the \nmedical office can use known default credentials to gain remote DBA \naccess to the Elefant Firebird database. The data in the database \nincludes patient data and login credentials among other sensitive data. \nIn addition, this enables an attacker to create and overwrite arbitrary \nfiles on the server filesystem with the rights of the Firebird database \n(\"NT AUTHORITY\\SYSTEM\").","status":"published","published":"2024-11-08T08:37:03Z","modified":"2025-11-03T22:28:24Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:49:29.890052Z"}],"ghsa":[{"id":"GHSA-8xpw-v6vw-79jf","title":"An unauthenticated attacker with access to the local network of the \nmedical office can use known...","description":"An unauthenticated attacker with access to the local network of the \nmedical office can use known default credentials to gain remote DBA \naccess to the Elefant Firebird database. The data in the database \nincludes patient data and login credentials among other sensitive data. \nIn addition, this enables an attacker to create and overwrite arbitrary \nfiles on the server filesystem with the rights of the Firebird database \n(\"NT AUTHORITY\\SYSTEM\").","status":"published","published":"2024-11-08T09:30:30Z","modified":"2025-11-04T00:33:01Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-419","CWE-1393"],"updated_at":"2026-11-02T15:04:32.302531Z"}],"nvd":[{"id":"CVE-2024-50588","description":"An unauthenticated attacker with access to the local network of the \nmedical office can use known default credentials to gain remote DBA \naccess to the Elefant Firebird database. The data in the database \nincludes patient data and login credentials among other sensitive data. \nIn addition, this enables an attacker to create and overwrite arbitrary \nfiles on the server filesystem with the rights of the Firebird database \n(\"NT AUTHORITY\\SYSTEM\").","status":"published","published":"2024-11-08T09:15:07.68Z","modified":"2026-06-17T08:04:45.477Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-419","CWE-1393"],"updated_at":"2026-11-02T14:10:36.560164Z"}]}}