Is CVE-2024-50588 actively exploited?

No active exploitation of CVE-2024-50588 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-50588 be exploited remotely?

Yes. CVE-2024-50588 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-50588?

CVE-2024-50588 has a CVSS score of 9.8 (CRITICAL).

HOME VULNERABILITIESCVE-2024-50588

CRITICAL

CVE-2024-50588

CWE-419Published: November 8, 2024· Updated: Jun 17, 2026

9.8

CVSS v3.1

Official Description

An unauthenticated attacker with access to the local network of the

medical office can use known default credentials to gain remote DBA

access to the Elefant Firebird database. The data in the database

includes patient data and login credentials among other sensitive data.

In addition, this enables an attacker to create and overwrite arbitrary

files on the server filesystem with the rights of the Firebird database

("NT AUTHORITY\SYSTEM").

NVD Source

Risk Analysis

The Elefant Firebird database is vulnerable to unauthorized access via default credentials, which can be exploited by an attacker on the local network. This allows for full database compromise and the ability to overwrite arbitrary files on the server with system-level privileges.

No public exploit is known for this issue, and it is not listed in the CISA KEV.

Recommended Action

Change all default database credentials immediately and restrict network access to the database server to authorized personnel only.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2024-50588 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 9.8.