CVE-2016-6530
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Dentsply Sirona（前称Schick）CDR DICOM是美国Dentsply Sirona公司的一套用于管理医疗牙科记录的软件。 Dentsply Sirona CDR Dicom 5及之前的版本中存在安全漏洞，该漏洞源于程序对sa和cdr账户使用默认的密码。远程攻击者可借助已知的密码利用该漏洞获取管理员访问权限。
Possible ATT&CK Techniques 1 AI
T1110 · Brute Force
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2016-6530
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Dentsply Sirona (formerly Schick) CDR Dicom 5 and earlier has default passwords for the sa and cdr accounts, which allows remote attackers to obtain administrative access by leveraging knowledge of these passwords.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Dentsply Sirona CDR DICOM 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Dentsply Sirona（前称Schick）CDR DICOM是美国Dentsply Sirona公司的一套用于管理医疗牙科记录的软件。 Dentsply Sirona CDR Dicom 5及之前的版本中存在安全漏洞，该漏洞源于程序对sa和cdr账户使用默认的密码。远程攻击者可借助已知的密码利用该漏洞获取管理员访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2016-6530
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2016-6530
请登录查看更多情报信息。
Vendor Advisories for CVE-2016-6530 (2)
Other References for CVE-2016-6530 (1)
-
https://www.schickbysirona.com/items.php?itemid=19189 x_refsource_CONFIRM
Same Patch Batch · n/a · 2016-09-21 · 43 CVEs total
| CVE-2016-7166 | libarchive 安全漏洞 | |
| CVE-2016-6159 | Huawei WS331a 安全漏洞 | |
| CVE-2016-0904 | EMC Avamar Data Store和Avamar Virtual Edition 安全漏洞 | |
| CVE-2016-0903 | EMC Avamar Data Store和Avamar Virtual Edition 安全漏洞 | |
| CVE-2016-0905 | EMC Avamar Data Stor和Avamar Virtual Edition 提权漏洞 | |
| CVE-2016-0921 | EMC Avamar Data Store和Avamar Virtual Edition 提权漏洞 | |
| CVE-2016-0925 | EMC RSA Adaptive Authentication Case Management 跨站脚本漏洞 | |
| CVE-2016-4382 | HPE Performance Center 安全漏洞 | |
| CVE-2016-4384 | HPE Performance Center和LoadRunner 拒绝服务漏洞 | |
| CVE-2016-0920 | EMC Avamar Data Store和Avamar Virtual Edition 命令注入漏洞 | |
| CVE-2015-8960 | TLS protocol 安全漏洞 | |
| CVE-2016-7163 | OpenJPEG 整数溢出漏洞 | |
| CVE-2016-7154 | Xen 释放后重用漏洞 | |
| CVE-2016-7143 | Charybdis 安全漏洞 | |
| CVE-2016-7094 | Xen 缓冲区溢出漏洞 | |
| CVE-2016-7093 | Xen 安全漏洞 | |
| CVE-2016-7092 | Xen 安全漏洞 | |
| CVE-2016-6801 | Apache Jackrabbit Jackrabbit-Webdav 跨站请求伪造漏洞 | |
| CVE-2016-6354 | Adobe Flex 基于堆的缓冲区错误漏洞 | |
| CVE-2016-6250 | libarchive 整数溢出漏洞 |
Showing top 20 of 43 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2016-6530
No comments yet