CVE-2024-3700
Hardcoded password in Estomed Sp. z o.o. Simple Care software
- State
- Published
- Severity
- 9.3 Critical
- Published
- Jun 10, 2024
- Updated
- Oct 3, 2025
- Reserved
- Apr 12, 2024
Description
Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Simple Care software installations.
This issue affects Estomed Sp. z o.o. Simple Care software in all versions. The software is no longer supported.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 4.0 | 9.3 Critical | CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:H/SA:H/AU:Y/R:U/V:C/RE:M/U:Red | CERT-PL |
Weaknesses
- CWE-259 Use of Hard-coded Password
Affected Products
| Product | Versions |
|---|---|
Simple CareEstomed Sp. z o.o. |
|
References
- https://cert.pl/en/posts/2024/06/CVE-2024-1228/third-party-advisory
- https://cert.pl/posts/2024/06/CVE-2024-1228/third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.