VULNERABILITY INTELLIGENCE

CVE-2018-7518

CVSS score9.8 CRITICAL

EPSS probability1.31%

CISA KEVNot currently listed

Published2018-05-24

Last modified2026-06-17

CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

In TotalAlert Web Application in BeaconMedaes Scroll Medical Air Systems prior to v4107600010.23, an attacker with network access to the integrated web server could retrieve default or user defined credentials stored and transmitted in an insecure manner.

Weakness classification

CWE-522: Insufficiently Protected Credentials

Primary references

ics-cert@hq.dhs.gov — Mitigation, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Mitigation, Third Party Advisory, US Government Resource