CVE-2022-37710

HIGH 7.8CVE-2022-37710 · Published 07/11/2022 · updated 17/06/2026

In short

CVE-2022-37710 is a HIGH (CVSS 7.8) vulnerability affecting eaglesoft (pattersondental).
Chance of exploitation in the next 30 days (EPSS): 0.12%, higher than 1.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
eaglesoft pattersondental	`= 21.0`	No fix yet

Description

Patterson Dental Eaglesoft 21 has AES-256 encryption but there are two ways to obtain a keyfile: (1) keybackup.data > License > Encryption Key or (2) Eaglesoft.Server.Configuration.data > DbEncryptKeyPrimary > Encryption Key. Applicable files are encrypted with keys and salt that are hardcoded into a DLL or EXE file.

References

justinshafer.blogspot.com/2022/08/eaglesofts-automatic-aes-256-encryption.html · Third Party Advisory

More vulnerabilities in eaglesoft

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free