Hillrom Medical Device Management

Summary

Vulnerabilities 2

• High 7.7
  CVE-2022-26389

  Improper Access Control Vulnerability in ELI Electrocardiograph Devices

  An improper access control vulnerability may allow privilege escalation.This issue affects:  * ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior;  * ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior;  * ELI 250c/BUR 250c…

  Welch Allyn Baxter/ Hillrom ELI 250c/BUR 250c Resting Electrocardiograph ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph
  Feb 7, 2025
• Medium 6.4
  CVE-2022-26388

  Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices

  A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting…

  Welch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph ELI 250c/BUR 250c Resting Electrocardiograph Alpine
  Feb 7, 2025

Revision history

1. 2022-06-16 #1

   ICSMA-22-167-01 Hillrom Medical Device Management

References

• ICS Advisory ICSMA-22-167-01 Web Version
  https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-167-01
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B