High ICSMA-21-343-01 1 CVE

Hillrom Welch Allyn Cardio Products

Published Dec 9, 2021 · Updated Dec 9, 2021

Vendor: Hillrom Product: Welch Allyn Connex Cardio Product: Welch Allyn Diagnostic Cardiology Suite Product: Welch Allyn H-Scribe Holter Analysis System Product: Welch Allyn Q-Stress Cardiac Stress Testing System Product: Welch Allyn R-Scribe Resting ECG System Product: Welch Allyn Vision Express Product: Welch Allyn X-Scribe Cardiac Stress Testing System

Summary

Successful exploitation of this vulnerability could allow an attacker to access privileged accounts.

Vulnerabilities 1

High 8.1

CVE-2021-43935

ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products

The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying…

Hillrom Welch Allyn Connex Cardio Welch Allyn X-Scribe Cardiac Stress Testing System Welch Allyn Vision Express

Dec 15, 2021

Revision history

2021-12-09 #1
ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products

References

ICS Advisory ICSMA-21-343-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-21-343-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B