Skip to content
OpenAdvisories
Medium ICSMA-21-152-01 2 CVEs

Hillrom Medical Device Management (Update B)

Published Jun 1, 2021 · Updated Dec 14, 2021 · Revision 2

Vendor: Hillrom Product: Welch Allyn Connex Central Station (CS) Product: Welch Allyn Connex Device Integration Suite - Network Connectivity Engine (NCE) Product: Welch Allyn Connex Integrated Wall System (CIWS) Product: Welch Allyn Connex Spot Monitor (CSM) Product: Welch Allyn Connex Vital Signs Monitor (CVSM) Product: Welch Allyn Service Monitor Product: Welch Allyn Service Tool Product: Welch Allyn Software Development Kit (SDK) Product: Welch Allyn Spot Vital Signs 4400 Device (Spot 4400) / Welch Allyn Spot 4400 Vital Signs Extended Care Device

Summary

Successful exploitation of these vulnerabilities could allow an attacker to cause memory corruption and remotely execute arbitrary code.

Vulnerabilities 2

  • Unscored —
    CVE-2021-27408

    The affected product is vulnerable to an out-of-bounds read, which can cause information leakage leading to arbitrary c…

  • Unscored —
    CVE-2021-27410

    The affected product is vulnerable to an out-of-bounds write, which may result in corruption of data or code execution …

Revision history

  1. #2

    ICSMA-21-152-01 Hillrom Medical Device Management (Update A)

  2. #1

    ICSMA-21-152-01 Hillrom Medical Device Management

References