Improper Access Control in ELI Resting Electrocardiographs by Hillrom
CVE-2022-26389
7.7HIGH
Key Information:
What is CVE-2022-26389?
An improper access control vulnerability exists within Hillrom's ELI Resting Electrocardiographs, potentially enabling unauthorized users to escalate their privileges. This issue affects multiple versions of ELI models, including the ELI 380, ELI 280, ELI 250c, and ELI 150c, posing critical risks to the secure operation of these medical devices. Prompt remediation is essential to protect sensitive patient data and maintain device integrity.
Affected Version(s)
ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph 0 <= 2.2.0
ELI 250c/BUR 250c Resting Electrocardiograph 0 <= 2.1.2
ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph 0 <= 2.3.1
References
CVSS V3.1
Score:
7.7
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
Credit
An anonymous user reported these vulnerabilities to Hillrom.