title: ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products
description: The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying a password, resulting in access to the application as the supplied AD account, with all associated privileges.
problem types: CWE-288 Authentication Bypass Using an Alternate Path or Channel
affected:
{
product: Welch Allyn Q-Stress Cardiac Stress Testing System
vendor: Hillrom
versions:
lessThanOrEqual: 6.3.1, status: affected, version: 6.0.0, versionType: custom
}
{
product: Welch Allyn X-Scribe Cardiac Stress Testing System
vendor: Hillrom
versions:
lessThanOrEqual: 6.3.1, status: affected, version: 5.01, versionType: custom
}
{
product: Welch Allyn Diagnostic Cardiology Suite
vendor: Hillrom
versions:
status: affected, version: 2.1.0
}
{
product: Welch Allyn Vision Express
vendor: Hillrom
versions:
lessThanOrEqual: 6.4.0, status: affected, version: 6.1.0, versionType: custom
}
{
product: Welch Allyn H-Scribe Holter Analysis System
vendor: Hillrom
versions:
lessThanOrEqual: 6.4.0, status: affected, version: 5.01, versionType: custom
}
{
product: Welch Allyn R-Scribe Resting ECG System
vendor: Hillrom
versions:
lessThanOrEqual: 7.0.0, status: affected, version: 5.01, versionType: custom
}
{
product: Welch Allyn Connex Cardio
vendor: Hillrom
versions:
lessThanOrEqual: 1.1.1, status: affected, version: 1.0.0, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: HIGH
baseScore: 8.1
baseSeverity: HIGH
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: NONE
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
solutions: Hillrom recommends users upgrade to the latest product versions when updated products are available. Information on how to update these products to their new versions can be found on the Hillrom disclosure page.
workarounds: -Disable the SSO feature in the respective Modality Manager Configuration settings. Please refer to the instructions for use (IFU) and/or service manual for instructions on how to disable SSO.
-Apply proper network and physical security controls.
-Apply authentication for server access.