Hardcoded credentials

2021-03-1522:15:00

PRIOn knowledge base

www.prio-n.com

5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.7%

JSON

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, hard-coded credentials in the ventilator allow attackers with physical access to obtain admin privileges for the device’s configuration interface.

CPENameOperatorVersion
hamilton-t1_firmwarele2.2.3

CPE	Name	Operator	Version
	hamilton-t1_firmware	le	2.2.3

References

us-cert.cisa.gov/ics/advisories/icsma-21-047-01