A critical vulnerability in Mirion Medical NMIS and BioDose software allows authenticated users to achieve remote code execution due to over-privileged database accounts.

The application utilizes a Microsoft SQL Server backend where default user accounts, specifically 'nmdbuser', are incorrectly assigned the sysadmin role. This excessive privilege allows an authenticated attacker to execute arbitrary commands on the underlying system through built-in stored procedures.

The ability for an authenticated user to gain remote code execution presents a high risk to organizational security, potentially leading to full system compromise and lateral movement within the network. Given the CVSS score of 8.3, this vulnerability represents a significant threat to data confidentiality and integrity. The risk is compounded for medical environments where system availability is critical for patient care.

Immediate Action: Update the affected NMIS and BioDose installations to version 23.0 or later as recommended by Mirion Medical.

Proactive Monitoring: Review SQL Server audit logs for the execution of unusual or administrative stored procedures initiated by the 'nmdbuser' account.

Compensating Controls: Restrict access to the SQL Server instance to only known, authorized application servers and audit the effective permissions of all database service accounts to adhere to the principle of least privilege.

Public Exploit Available: Unknown

This vulnerability highlights a critical failure in the principle of least privilege regarding database administration. Organizations should prioritize the upgrade to version 23.0 immediately to resolve the improper permission assignments. If an immediate upgrade is not feasible, restrict network access to the database layer to minimize the attack surface until the remediation can be applied.