CVE-2024-50589: Hasomed Elefant

High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days.

An unauthenticated attacker with access to the local network of the medical office can query an unprotected Fast Healthcare Interoperability Resources (FHIR) API to get access to sensitive electronic health records (EHR).

Affected products

• Hasomed Elefant: before 24.04.00 (fixed in 24.04.00)

Published 2024-11-08. Last modified 2026-06-17.