Description
An improper access control vulnerability may allow privilege escalation.This issue affects:
* ELI 380 Resting Electrocardiograph:
Versions 2.6.0 and prior;
* ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph:
Versions 2.3.1 and prior;
* ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior;
* ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph:
Versions 2.2.0 and prior.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Baxter/ Hillrom | ELI 380 Resting Electrocardiograph | ≤ 2.6.0 | — |
| Welch Allyn | ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph | ≤ 2.3.1 | — |
| Welch Allyn | ELI 250c/BUR 250c Resting Electrocardiograph | ≤ 2.1.2 | — |
| Welch Allyn | ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph | ≤ 2.2.0 | — |
Advisories 1
- ICSMA-22-167-01 Hillrom Medical Device Management CISA ICS & IT advisories · Jun 16, 2022