CVE-2016-8355

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1

published February 13, 2017

CVSS
โ€”
EPSS
1%
Percentile
73.8
In the wild
Unconfirmed
What it is

โš ๏ธ An authenticated user can open the door to elevated SQL database privileges with just a few steps! ๐ŸŽญ Think of it like a restaurant manager who suddenly gains access to the recipe vault โ€” they can change ingredients, add or remove dishes, and even alter staff roles without any oversight! ๐Ÿฝ๏ธ This could lead to absolutely devastating scenarios where a rogue insider manipulates drug libraries, creates additional users, or changes permissions unchecked. Imagine the chaos this could bring to medication safety efforts!

Put simply

Think of it like a restaurant manager who suddenly gains access to the recipe vault โ€” they can change ingredients, add or remove dishes, and even alter staff roles without any oversight! ๐Ÿฝ๏ธ The vulnerability in Smiths-Medical CADD-Solis Medication Safety Software allows authenticated users to gain elevated privileges on the SQL database, enabling them to modify sensitive data, including drug libraries and user permissions.

What to do

This could lead to absolutely devastating scenarios where a rogue insider manipulates drug libraries, creates additional users, or changes permissions unchecked. Imagine the chaos this could bring to medication safety efforts! To mitigate this risk, ensure physical access to the device is controlled and review user permissions regularly. If possible, apply patches or updates from Smiths-Medical that could strengthen access controls. You've got this! By tightening access control, you can keep your medication management secure! ๐Ÿ›ก๏ธ

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01491 ยท 73.8th percentile
Published
2017-02-13T22:00Z
EPSS history
Timeline
  • 13 FEB 22:00Z
    An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1
    cvelistv5