NetSight
medium4.0

CVE-2005-4002

WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation.

Impact

WebEOC before 6.0.2 uses the same secret key for all installations, which allows attackers with the key to decrypt data from any WebEOC installation.

Affected products

VendorProductAffected versions
Esi ProductsWebeoc
through 6.0.1

References