Elefant Software Updater vulnerabilities

2 known vulnerabilities in Elefant Software Updater from HASOMED. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.0 High severity

  Elefant Software Updater: Time-of-check Time-of-use (TOCTOU) Race Condition

  CVE-2024-50592Nov 8, 2024HASOMED

  An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\SYSTEM" by exploiting a race condition in the Elefant Update Service during the repair or update process. When using the repair function, the

• 7.8 High severity

  Elefant Software Updater: Improper Neutralization of Special Elements used in a Command

  CVE-2024-50591Nov 8, 2024HASOMEDEPSS 2%

  An attacker with local access the to medical office computer can escalate his Windows user privileges to "NT AUTHORITY\SYSTEM" by exploiting a command injection vulnerability in the Elefant Update Service. The command injection can be exploited by communicatin