Zoll manufactures medical monitoring and defibrillation devices including dashboard and integrated monitor/defibrillator systems that operate in clinical and emergency settings where uptime and security directly affect patient safety. Its vulnerability surface centers on authentication, access control, and data-protection mechanisms—cleartext storage of sensitive information, cross-site scripting in web interfaces, improper privilege management, and password-recovery weaknesses—reflecting the constraints of securing legacy medical device firmware and web administration layers. Current severity, exploitation status, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Zoll over time
Signals from CVEs in this vendor scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-27489HIGH ZOLL Defibrillator Dashboard, v prior to 2.2, The web application allows a non-administrative user to upload a malicious file. This file could allow an attacker to remotely execute | Jun 16, 2021 | 8.8 | 27 | NO | NO |
CVE-2021-27485HIGH ZOLL Defibrillator Dashboard, v prior to 2.2,The application allows users to store their passwords in a recoverable format, which could allow an attacker to retrieve the credential | Jun 16, 2021 | 7.5 | 24 | NO | NO |
CVE-2021-27483HIGH ZOLL Defibrillator Dashboard, v prior to 2.2,The affected products contain insecure filesystem permissions that could allow a lower privilege user to escalate privileges to an admi | Jun 16, 2021 | 7.8 | 24 | NO | NO |
CVE-2021-27479MEDIUM ZOLL Defibrillator Dashboard, v prior to 2.2,The affected product’s web application could allow a low privilege user to inject parameters to contain malicious scripts to be execute | Jun 16, 2021 | 5.4 | 19 | NO | NO |
CVE-2021-27487MEDIUM ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products contain credentials stored in plaintext. This could allow an attacker to gain access to sensitive information. | Jun 16, 2021 | 5.5 | 19 | NO | NO |
CVE-2021-27481MEDIUM ZOLL Defibrillator Dashboard, v prior to 2.2, The affected products utilize an encryption key in the data exchange process, which is hardcoded. This could allow an attacker to gain | Jun 16, 2021 | 5.5 | 19 | NO | NO |
CVE-2013-7395MEDIUM ZOLL Defibrillator / Monitor X Series has a default (1) supervisor password and (2) service password, which allows physically proximate attackers to modify device configuration and | Aug 12, 2014 | 4.9 | 19 | NO | NO |
CVE-2007-6756MEDIUM ZOLL Defibrillator / Monitor M Series, E Series, and R Series have a default password for System Configuration mode, which allows physically proximate attackers to modify device co | Aug 12, 2014 | 4.9 | 18 | NO | NO |
Signals from CVEs in this vendor scope (8 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Zoll.
Media articles that mention a CVE ID that affects a product developed by Zoll — matched by CVE ID, not by vendor name.