Title

DEXIS Imaging Suite Hardcoded Credentials Vulnerability (Cat I impact)

Discussion

CERT has issued a security advisory addressing a vulnerability in DEXIS Imaging Suite 10. DEXIS is a dental x-ray imaging software that manages patient records. To exploit this vulnerability, an attacker would interact with the affected application that contains several hard-coded credentials. If successfully exploited, this vulnerability would allow a remote, unauthenticated attacker to gain administrative access to the DEXIS patient database.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-71585

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.