What is CVE-2024-50590?

CVE-2024-50590 is a high-severity vulnerability in Hasomed Elefant, classified under CWE-250. CVSS score: 7.8/10. Published 2024-11-08.

How severe is CVE-2024-50590?

High severity. CVSS v3 base score is 7.8 out of 10.

Vulnerability in Hasomed Elefant

CVE-2024-50590

Attackers with local access to the medical office computer can escalate their Windows user privileges to "NT AUTHORITY\SYSTEM" by overwriting one of two Elefant service binaries with weak permissions. The default installation directory o…

EPSS: 0.002 (8.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 7.8 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Hasomed Elefant — versions <24.04.00

Weakness classification (CWE)

CWE-250
CWE-276 — Incorrect Default Permissions
CWE-732 — Incorrect Permission Assignment for Critical Resource

References

551230f0-3615-47bd-b7cc-93e92e730bbf (third-party-advisory)
551230f0-3615-47bd-b7cc-93e92e730bbf (patch)
af854a3a-2127-422b-91ae-364da2661108

Frequently asked questions

What is CVE-2024-50590?: CVE-2024-50590 is a high-severity vulnerability in Hasomed Elefant, classified under CWE-250. CVSS score: 7.8/10. Published 2024-11-08.
How severe is CVE-2024-50590?: High severity. CVSS v3 base score is 7.8 out of 10.