A vulnerability, which was classified as very critical, has been found in Dentsply Sirona CDR Dicom up to 5. Affected by this issue is an unknown function. The manipulation with an unknown input leads to a hard-coded credentials vulnerability. Using CWE to declare the problem leads to CWE-798. The product contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Dentsply Sirona (formerly Schick) CDR Dicom 5 and earlier has default passwords for the sa and cdr accounts, which allows remote attackets to obtain administrative access by leveraging knowledge of these passwords.

The weakness was shared 09/21/2016 (Website). The advisory is shared for download at kb.cert.org. This vulnerability is handled as CVE-2016-6530 since 08/03/2016. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. There are neither technical details nor an exploit publicly available. The current price for an exploit might be approx. USD $0-$5k (estimation calculated on 04/21/2019). The MITRE ATT&CK project declares the attack technique as T1110.001.

It is possible to mitigate the problem by applying the configuration setting .

Productinfo

Vendor

• Dentsply Sirona

Name

• CDR Dicom

Version

• 5

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion