CVE-2022-26389
highPriorität · verfolgen · 0EPSS 0.003 · 20. PerzentilEUUSEPSS · bewertet 2026-10-23
An improper access control vulnerability may allow privilege escalation.This issue affects: * ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; * ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; * ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior; * ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: Versions 2.2.0 and prior.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenWelch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiographcisa_csaf_ot
Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:
- BehobenWelch Allyn ELI 250c/BUR 250c Resting Electrocardiographcisa_csaf_ot
Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:
- BehobenWelch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiographcisa_csaf_ot
Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:
- BehobenWelch Allyn ELI 380 Resting Electrocardiographcisa_csaf_ot
Hillrom has released software updates for all impacted devices to address these vulnerabilities. New product versions that mitigate these vulnerabilities are available as follows:
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (12)
Betroffene Produkte und Versionsbereiche.
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSMA-22-167-01Hillrom Medical Device Management2022-06-16icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could allow an attacker to compromise software security by executing commands, gaining privileges, reading sensitive information, evading detection, etc.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (9)
Externe Belege — Patches, Meldungen, Analysen.
- https://hillrom.com/en/responsible-disclosures/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsma-22-167-01cnnvd
- https://www.auscert.org.au/bulletins/ESB-2022.2990cnnvd
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-167-01cnnvd
- https://www.hillrom.com/en/responsible-disclosures/Patchcnnvd
- https://hillrom.com/en/responsible-disclosures/enisa_euvd
- https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-167-01enisa_euvd
- https://hillrom.com/en/responsible-disclosures/nvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan