OpenEMR

OpenEMR, widely adopted by over 100,000 medical providers to manage records of more than 200 million patients, identified three critical vulnerabilities within an older version of its software. Spotted by Sonar, these vulnerabilities - Unauthenticated File Read, Authenticated Local File Inclusion, and Authenticated Reflected XSS - possess the potential for enabling ransomware and data breach attacks, posing serious threats. The risks apply to data integrity and accessibility of patient information. Although patches were released in the updated OpenEMR version 7.0.0, those using outdated versions remain exposed to the exploitable weaknesses, which if leveraged by cybercriminals, could lead to substantial data compromises. An immediate update to the software is urged to safeguard patient data and thwart potential cybersecurity incidents.

Source: https://www.hcinnovationgroup.com/cybersecurity/data-breaches/news/21294503/hc3-sector-alert-on-older-versions-of-openemr

TPRM report: https://scoringcyber.rankiteo.com/company/openemr

"id": "ope452070624",
"linkid": "openemr",
"type": "Vulnerability",
"date": "2/2023",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 'Over 200 million patients',
                        'industry': 'Healthcare',
                        'name': 'OpenEMR',
                        'size': 'Over 100,000 medical providers',
                        'type': 'Software'}],
 'attack_vector': ['Unauthenticated File Read',
                   'Authenticated Local File Inclusion',
                   'Authenticated Reflected XSS'],
 'description': 'OpenEMR, widely adopted by over 100,000 medical providers to '
                'manage records of more than 200 million patients, identified '
                'three critical vulnerabilities within an older version of its '
                'software. Spotted by Sonar, these vulnerabilities - '
                'Unauthenticated File Read, Authenticated Local File '
                'Inclusion, and Authenticated Reflected XSS - possess the '
                'potential for enabling ransomware and data breach attacks, '
                'posing serious threats. The risks apply to data integrity and '
                'accessibility of patient information. Although patches were '
                'released in the updated OpenEMR version 7.0.0, those using '
                'outdated versions remain exposed to the exploitable '
                'weaknesses, which if leveraged by cybercriminals, could lead '
                'to substantial data compromises. An immediate update to the '
                'software is urged to safeguard patient data and thwart '
                'potential cybersecurity incidents.',
 'impact': {'data_compromised': 'Potentially substantial',
            'systems_affected': 'Outdated versions of OpenEMR software'},
 'lessons_learned': 'Importance of keeping software updated to avoid '
                    'vulnerabilities',
 'motivation': 'Data breach, ransomware attacks',
 'post_incident_analysis': {'corrective_actions': 'Software update to version '
                                                  '7.0.0',
                            'root_causes': 'Vulnerabilities in older versions '
                                           'of OpenEMR software'},
 'recommendations': 'Immediate update to OpenEMR version 7.0.0',
 'response': {'communication_strategy': 'Urging immediate update to the '
                                        'software',
              'remediation_measures': 'Release of patches in version 7.0.0'},
 'threat_actor': 'Cybercriminals',
 'title': 'OpenEMR Critical Vulnerabilities',
 'type': 'Vulnerability Exploitation',
 'vulnerability_exploited': ['Unauthenticated File Read',
                             'Authenticated Local File Inclusion',
                             'Authenticated Reflected XSS']}