CVE-2021-27489

Name of the Vulnerable Software and Affected Versions ZOLL Defibrillator Dashboard versions prior to 2.2

Description The web application allows a non-administrative user to upload a malicious file, which could enable an attacker to remotely execute arbitrary commands.

Recommendations For versions prior to 2.2, update to version 2.2 or later to resolve the issue. As a temporary workaround, consider restricting file upload permissions to administrative users only until a patch is applied.