Marco Sala

AIS products expose clinical and personal data via logs and telemetry

AIS products use vendor-wide hard-coded database credentials

AIS shared cryptographic services use fixed cryptographic secrets

AIS update mechanism executes unverified code

AIS PersonnelService client performs unauthenticated doctor-specific operations

AIS embedded private keys enable practitioner impersonation

AIS PasswordSOS permits authentication without legitimate credentials

AIS shared test login provider contains fixed administrative credentials

Venere loads replaceable unsigned components from a writable installation location

Unauthenticated SQL Execution in XDent/XMedical Synchronization Infrastructure