Riskcovery

CVE-2022-26389

Improper Access Control Vulnerability in ELI Electrocardiograph Devices

State
Published
Severity
7.7 High
Published
Feb 7, 2025
Updated
Feb 7, 2025
Reserved
Mar 3, 2022

Read the record on cve.org

Description

An improper access control vulnerability may allow privilege escalation.This issue affects:

* ELI 380 Resting Electrocardiograph:

Versions 2.6.0 and prior;  * ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph:

Versions 2.3.1 and prior;  * ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior;  * ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph:

Versions 2.2.0 and prior.

Scores

CVSSScoreVectorSource
3.17.7 HighCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:L/A:HBaxter

Weaknesses

Affected Products

ProductVersions
ELI 380 Resting ElectrocardiographBaxter/ Hillrom
  • 2.6.0 and earlierAffected
ELI 280/BUR280/MLBUR 280 Resting ElectrocardiographWelch Allyn
  • 2.3.1 and earlierAffected
ELI 250c/BUR 250c Resting ElectrocardiographWelch Allyn
  • 2.1.2 and earlierAffected
ELI 150c/BUR 150c/MLBUR 150c Resting ElectrocardiographWelch Allyn
  • 2.2.0 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.