ICSMA-22-167-01

icsaUScisa_csaf_ot

Hillrom Medical Device Management

view advisory published 2022-06-16

Successful exploitation of these vulnerabilities could allow an attacker to compromise software security by executing commands, gaining privileges, reading sensitive information, evading detection, etc.

01

describes (2)

Related CVEs.

IDseverity exploitable
CVE-2022-26389US——
An improper access control vulnerability may allow privilege escalation.This issue affects:  * ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior;  * ELI 280/BUR2…
CVE-2022-26388US—OT elevated—
A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 28…
02

references

External citations — patches, advisories, analysis.

03

remediations (8)

  • FixedWelch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • FixedWelch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • FixedWelch Allyn ELI 250c/BUR 250c Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • FixedWelch Allyn ELI 250c/BUR 250c Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • FixedWelch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • FixedWelch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • FixedWelch Allyn ELI 380 Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • FixedWelch Allyn ELI 380 Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan