Vulnerability · Published Dec 15, 2021 · Assigned by icscert

CVE-2021-43935ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products

High 8.1

In plain English

A high-severity authentication bypass in Welch Allyn Connex Cardio from Hillrom. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.1% (higher than 67% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)1.1%top 33.1% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying a password, resulting in access to the application as the supplied AD account, with all associated privileges.

Affected products (as reported)

Vendor	Product	Versions
Hillrom	Welch Allyn Q-Stress Cardiac Stress Testing System	6.0.0 – through 6.3.1
Hillrom	Welch Allyn X-Scribe Cardiac Stress Testing System	5.01 – through 6.3.1
Hillrom	Welch Allyn Diagnostic Cardiology Suite	2.1.0
Hillrom	Welch Allyn Vision Express	6.1.0 – through 6.4.0
Hillrom	Welch Allyn H-Scribe Holter Analysis System	5.01 – through 6.4.0
Hillrom	Welch Allyn R-Scribe Resting ECG System	5.01 – through 7.0.0
Hillrom	Welch Allyn Connex Cardio	1.0.0 – through 1.1.1

Weakness: CWE-288 · Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-343-01 x_refsource_MISC