Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

Buy Us a Coffee

CVE-2024-1228— Hardcoded password in Eurosoft Przychodnia

Quick assessment

Affected

EuroSoft Sp. z o. o. Eurosoft Przychodnia

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Eurosoft Przychodnia是波兰Eurosoft公司的一个云诊所。 Eurosoft Przychodnia 20240417.001 之前版本存在安全漏洞，该漏洞源于数据库使用硬编码密码，允许攻击者检索数据库中存储的敏感数据。

AI Predicted 9.8 Difficulty: Trivial EPSS 0.41% · P35 Updated Oct 07, 2025

Possible ATT&CK Techniques 1 AI

T1078 · Valid Accounts

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2024-1228

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

Hardcoded password in Eurosoft Przychodnia

Source: CVE Program / CVE List V5

Vulnerability Description

Use of hard-coded password to the patients' database allows an attacker to retrieve sensitive data stored in the database. The password is the same among all Eurosoft Przychodnia installations. This issue affects Eurosoft Przychodnia software before version 20240417.001 (from that version vulnerability is fixed).

Source: CVE Program / CVE List V5

CVSS Information

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:H/SA:H/AU:Y/R:U/V:C/RE:M/U:Red

Source: CVE Program / CVE List V5

Vulnerability Type

使用硬编码的口令

Source: CVE Program / CVE List V5

Vulnerability Title

Eurosoft Przychodnia 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
EuroSoft Sp. z o. o.	Eurosoft Przychodnia	0 ~ 20240417.001	-

II. Public POCs for CVE-2024-1228

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2024-1228

请登录查看更多情报信息。

Security Blog Posts for CVE-2024-1228 (2)

https://cert.pl/posts/2024/06/CVE-2024-1228/ third-party-advisory
https://cert.pl/en/posts/2024/06/CVE-2024-1228/ third-party-advisory

Other References for CVE-2024-1228 (1)

https://www.eurosoft.com.pl/eurosoft-przychodnia product

https://www.cve.org/CVERecord?id=CVE-2024-1228

IV. Related Vulnerabilities

Same weakness: CWE-259