CVE-2024-5176CWE-522

Vulnerability in Welch Allyn Configuration Tool Software

Critical · published May 31, 2024

CVSS v4.0
9.4
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services with Stolen Credentials.This issue affects Welch Allyn Configuration Tool: versions 1.9.4.1 and prior.

The record
Technical detail
CVSS v4.0
9.4 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:L/SC:H/SI:H/SA:L
EPSS
0.00477 · 40.2th percentile
Weakness
CWE-522 · Insufficiently Protected Credentials
Published
2024-05-31T17:26Z
EPSS history
Timeline
  • 31 MAY 17:26Z
    Vulnerability in Welch Allyn Configuration Tool Software
    cvelistv5