Skip to content
CVE PROGRAM SOURCE RECORD6.4 Medium

CVE-2022-26388

Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Baxter

Description

A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: Versions 2.2.0 and prior.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Welch Allyn ELI 380 Resting Electrocardiograph

Default version status: unaffected

  • 0 to ≤ 2.6.0affected

Welch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph

Default version status: unaffected

  • 0 to ≤ 2.3.1affected

Welch Allyn ELI 250c/BUR 250c Resting Electrocardiograph

Default version status: unaffected

  • 0 to ≤ 2.1.2affected

Welch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph

Default version status: unaffected

  • 0 to ≤ 2.2.0affected

References