CVE-2024-1228

CVE-2024-1228 is a critical vulnerability affecting Eurosoft Przychodnia software versions prior to 20240417.001. It stems from the use of a hard-coded password for the patient database, which is identical across all installations. This allows an unauthenticated attacker to remotely access and retrieve sensitive patient data, leading to a complete compromise of confidentiality, integrity, and availability (CVSS 9.8 Critical). While no active exploitation, public exploit code, or significant community discussion has been observed, the vulnerability's ease of exploitation and severe impact warrant immediate patching.