Browse all 6 CVE security advisories affecting HASOMED. AI-powered Chinese analysis, POCs, and references for each vulnerability.
HASOMED develops medical technology solutions, primarily focusing on assistive devices and rehabilitation systems. Historically, their products have been susceptible to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from insufficient input validation and insecure default configurations. While no major public security incidents have been widely documented, the six CVEs on record highlight persistent security concerns in their web interfaces and communication protocols. Their systems typically handle sensitive patient data, making robust security measures critical. The company has gradually addressed vulnerabilities through patches, though comprehensive security hardening remains an ongoing challenge in their product lifecycle.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2024-50592 | Local Privilege Escalation via Race Condition — Elefant Software UpdaterCWE-367 | 6.4 | - | 2024-11-08 |
| CVE-2024-50593 | Hardcoded Service Password — ElefantCWE-798 | 6.7 | - | 2024-11-08 |
| CVE-2024-50591 | Local Privilege Escalation via Command Injection — Elefant Software UpdaterCWE-77 | 6.7 | - | 2024-11-08 |
| CVE-2024-50590 | Local Privilege Escalation via Weak Service Binary Permissions — ElefantCWE-276 | 6.7 | - | 2024-11-08 |
| CVE-2024-50589 | Unprotected FHIR API — ElefantCWE-306 | 5.7 | - | 2024-11-08 |
| CVE-2024-50588 | Unprotected Exposed Firebird Database with default credentials — ElefantCWE-1393 | 8.8 | - | 2024-11-08 |
This page lists every published CVE security advisory associated with HASOMED. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.