The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying a password, resulting in access to the application as the supplied AD account, with all associated privileges.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Welch Allyn Q-Stress Cardiac Stress Testing System
Vendor
Hillrom
Product
Welch Allyn Q-Stress Cardiac Stress Testing System
Platforms
Unknown
Default status
Unknown
Welch Allyn Q-Stress Cardiac Stress Testing System · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.0.0
affected
custom
Unavailable
6.3.1
None listed
Welch Allyn X-Scribe Cardiac Stress Testing System
Vendor
Hillrom
Product
Welch Allyn X-Scribe Cardiac Stress Testing System
Platforms
Unknown
Default status
Unknown
Welch Allyn X-Scribe Cardiac Stress Testing System · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.01
affected
custom
Unavailable
6.3.1
None listed
Welch Allyn Diagnostic Cardiology Suite
Vendor
Hillrom
Product
Welch Allyn Diagnostic Cardiology Suite
Platforms
Unknown
Default status
Unknown
Welch Allyn Diagnostic Cardiology Suite · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
2.1.0
affected
Unavailable
Unavailable
Unavailable
None listed
Welch Allyn Vision Express
Vendor
Hillrom
Product
Welch Allyn Vision Express
Platforms
Unknown
Default status
Unknown
Welch Allyn Vision Express · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
6.1.0
affected
custom
Unavailable
6.4.0
None listed
Welch Allyn H-Scribe Holter Analysis System
Vendor
Hillrom
Product
Welch Allyn H-Scribe Holter Analysis System
Platforms
Unknown
Default status
Unknown
Welch Allyn H-Scribe Holter Analysis System · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.01
affected
custom
Unavailable
6.4.0
None listed
Welch Allyn R-Scribe Resting ECG System
Vendor
Hillrom
Product
Welch Allyn R-Scribe Resting ECG System
Platforms
Unknown
Default status
Unknown
Welch Allyn R-Scribe Resting ECG System · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
5.01
affected
custom
Unavailable
7.0.0
None listed
Welch Allyn Connex Cardio
Vendor
Hillrom
Product
Welch Allyn Connex Cardio
Platforms
Unknown
Default status
Unknown
Welch Allyn Connex Cardio · Scoped product and version facts