ICSMA-22-167-01

icsaUScisa_csaf_ot

Hillrom Medical Device Management

Advisory ansehen veröffentlicht 2022-06-16

Successful exploitation of these vulnerabilities could allow an attacker to compromise software security by executing commands, gaining privileges, reading sensitive information, evading detection, etc.

01

beschreibt (2)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2022-26389US——
An improper access control vulnerability may allow privilege escalation.This issue affects:  * ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior;  * ELI 280/BUR2…
CVE-2022-26388US—OT erhöht—
A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 28…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (8)

  • BehobenWelch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • BehobenWelch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • BehobenWelch Allyn ELI 250c/BUR 250c Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • BehobenWelch Allyn ELI 250c/BUR 250c Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • BehobenWelch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • BehobenWelch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • BehobenWelch Allyn ELI 380 Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

  • BehobenWelch Allyn ELI 380 Resting Electrocardiograph

    Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan