CVE-2024-50593: Hasomed Elefant

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An attacker with local access to the medical office computer can access restricted functions of the Elefant Service tool by using a hard-coded "Hotline" password in the Elefant service binary, which is shipped with the software.

Affected products

  • Hasomed Elefant: before 24.03.03 (fixed in 24.03.03)

Published 2024-11-08. Last modified 2026-06-17.