CVE-2024-1228 is a critical flaw in Eurosoft Przychodnia, a medical practice software product. The patients' database uses a hard-coded password that is the same in every installation, which lets an attacker read sensitive data. NVD scores it 9.8. Versions before 20240417.001 are affected, and that build fixes it.
What's affected
Per the record and the CERT Polska advisory, all Eurosoft Przychodnia versions before 20240417.001 are affected. The vendor fixed the issue in that version.
The cause is the one password for the patients' database, shared among all installations. Anyone who learns it can reach the data of any affected installation they can connect to.
CERT Polska published a single advisory covering three similar flaws in Polish medical software. The other two are CVE-2024-3699 in drEryk Gabinet and CVE-2024-3700 in Simple Care. For Przychodnia the answer is simple: update to 20240417.001 or later.
Weakness class: CWE-259, CWE-798. The NVD record carries the vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H and a score of 9.8.
How to check if you're exposed
Open the Przychodnia application and find the version or build number in its About or information screen. Compare it with 20240417.001. Anything earlier needs the update.
Also work out whether the database port is reachable from outside the practice network. Run a scan of your own address space for the database service ports from a trusted host, and check firewall rules.
Safeguard has a free in-browser dependency scan at gold.safeguard.sh/scan for the libraries in your own projects, and reachability analysis helps you tell which findings your code actually calls.
What to do now
- Update Eurosoft Przychodnia to build 20240417.001 or later through the vendor.
- Confirm the build number after the update.
- Make sure the database server is not exposed to the internet, and limit it to the application host.
- Review the CERT Polska advisory and ask the vendor how the credentials were changed.
- Under your data protection duties, document the exposure window and ask your privacy lead whether anything must be reported.
Why it matters
Hard-coded credentials are CWE-798, and a hard-coded password is also CWE-259. Because the secret ships in the product, it is the same everywhere, and anyone with a copy of the software can extract it. Rotating it per installation is the fix pattern.
Health records are among the most sensitive data a small practice holds, which is why a 9.8 here deserves quick action. The record's KEV flag is false, and CERT Polska's page did not report exploitation in the text I read.
Try it yourself
Click through it at your own pace, or open it full screen.
Quick check
Which version fixes CVE-2024-1228?
Eurosoft Przychodnia 20240417.001. Everything before it is affected.
Are the other CERT Polska CVEs fixed too?
Not necessarily. CVE-2024-3700 in Simple Care has no fix because that product is unsupported, per the advisory.
Sources
Last reviewed: 19 October 2026.
