CVE-2022-26388mediumCWE-259

CVE-2022-26388: falha de média gravidade em Welch Allyn ELI 380 Resting Electrocardiograph

Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices

Publicada em

Seguir esta CVE+ Monitorar ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph+ Monitorar ELI 250c/BUR 250c Resting Electrocardiograph

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.4epss 0.3%
A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: Versions 2.2.0 and prior.
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Produtos afetados
Welch Allyn · ELI 150c/BUR 150c/MLBUR 150c Resting ElectrocardiographWelch Allyn · ELI 250c/BUR 250c Resting ElectrocardiographWelch Allyn · ELI 280/BUR280/MLBUR 280 Resting ElectrocardiographWelch Allyn · ELI 380 Resting Electrocardiograph
CVEs relacionadas — Welch Allyn ELI 380 Resting Electrocardiograph

No mesmo produto, das mais perigosas para as menos.

CVE-2022-26389HIGHImproper Access Control Vulnerability in ELI Electrocardiograph DevicesEPSS 0.3%