GCVE Workshop - 22 September 2026 (14:00-18:00), Luxembourg Before The Vulnopticon Conference - Registration

CVE-2022-26388 (GCVE-0-2022-26388)

Vulnerability from cvelistv5 – Published: 2025-02-07 17:06 – Updated: 2025-02-07 18:50
VLAI
Title
Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices
Summary
A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: Versions 2.2.0 and prior.
Severity
6.4 (Medium)
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
SSVC
Exploitation: none Automatable: no Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2025-02-07 18:50 UTC
CWE
  • CWE-259 - Use of Hard-Coded Password
Assigner
References
Impacted products
Credits
An anonymous user reported these vulnerabilities to Hillrom.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2022-26388",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2025-02-07T18:50:50.198188Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2025-02-07T18:50:58.812Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "unaffected",
          "product": "ELI 380 Resting Electrocardiograph",
          "vendor": "Welch Allyn",
          "versions": [
            {
              "lessThanOrEqual": "2.6.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph",
          "vendor": "Welch Allyn",
          "versions": [
            {
              "lessThanOrEqual": "2.3.1",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ELI 250c/BUR 250c Resting Electrocardiograph",
          "vendor": "Welch Allyn",
          "versions": [
            {
              "lessThanOrEqual": "2.1.2",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        },
        {
          "defaultStatus": "unaffected",
          "product": "ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph",
          "vendor": "Welch Allyn",
          "versions": [
            {
              "lessThanOrEqual": "2.2.0",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "finder",
          "value": "An anonymous user reported these vulnerabilities to Hillrom."
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "A use of hard-coded password vulnerability may allow authentication abuse.\u003cp\u003eThis issue affects ELI 380 Resting Electrocardiograph: \n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eVersions 2.6.0 and prior\u003c/span\u003e; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph:\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eVersions 2.3.1 and prior\u003c/span\u003e; ELI 250c/BUR 250c Resting Electrocardiograph:\n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eVersions 2.1.2 and prior\u003c/span\u003e; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: \n\n\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eVersions 2.2.0 and prior\u003c/span\u003e.\u003c/p\u003e"
            }
          ],
          "value": "A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: \n\nVersions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph:\n\nVersions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph:\n\nVersions 2.1.2 and prior; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: \n\nVersions 2.2.0 and prior."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-114",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-114 Authentication Abuse"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "LOW",
            "baseScore": 6.4,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-259",
              "description": "CWE-259 Use of Hard-Coded Password",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2025-02-07T17:06:30.134Z",
        "orgId": "dba971b9-eb30-4121-91e1-3b45611354aa",
        "shortName": "Baxter"
      },
      "references": [
        {
          "url": "https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-167-01"
        },
        {
          "url": "https://hillrom.com/en/responsible-disclosures/"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eHillrom has released software updates for all impacted devices to \naddress these vulnerabilities. New product versions that mitigate these \nvulnerabilities are available as follows:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eWelch Allyn ELI 380 Resting Electrocardiograph: available Q4 2023\u003c/li\u003e\n\u003cli\u003eWelch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: available May 2022\u003c/li\u003e\n\u003cli\u003eWelch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: available Q4 2023\u003c/li\u003e\n\u003c/ul\u003e\n\n\nHillrom recommends users upgrade to the latest product versions. \nInformation on how to update these products can be found on the \u003ca target=\"_blank\" rel=\"nofollow\" href=\"https://hillrom.com/en/responsible-disclosures/\"\u003eHillrom disclosure page\u003c/a\u003e.\n\n\u003cbr\u003e"
            }
          ],
          "value": "Hillrom has released software updates for all impacted devices to \naddress these vulnerabilities. New product versions that mitigate these \nvulnerabilities are available as follows:\n\n\n\n  *  Welch Allyn ELI 380 Resting Electrocardiograph: available Q4 2023\n\n  *  Welch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: available May 2022\n\n  *  Welch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: available Q4 2023\n\n\n\n\n\n\nHillrom recommends users upgrade to the latest product versions. \nInformation on how to update these products can be found on the  Hillrom disclosure page https://hillrom.com/en/responsible-disclosures/ ."
        }
      ],
      "source": {
        "advisory": "ICSMA-22-167-01",
        "discovery": "EXTERNAL"
      },
      "title": "Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices",
      "workarounds": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cp\u003eHillrom recommends the following workarounds to help reduce risk:\u003c/p\u003e\n\u003cul\u003e\n\u003cli\u003eApply proper network and physical security controls.\u003c/li\u003e\n\u003cli\u003eEnsure a unique encryption key is configured for ELI Link and Cardiograph.\u003c/li\u003e\n\u003cli\u003eWhere possible, use a firewall to prevent communication on Port 21 \nFTP service, Port 22 SSH (Secure Shell Connection), and Port 23 Telnet \nservice.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "Hillrom recommends the following workarounds to help reduce risk:\n\n\n\n  *  Apply proper network and physical security controls.\n\n  *  Ensure a unique encryption key is configured for ELI Link and Cardiograph.\n\n  *  Where possible, use a firewall to prevent communication on Port 21 \nFTP service, Port 22 SSH (Secure Shell Connection), and Port 23 Telnet \nservice."
        }
      ],
      "x_generator": {
        "engine": "Vulnogram 0.2.0"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dba971b9-eb30-4121-91e1-3b45611354aa",
    "assignerShortName": "Baxter",
    "cveId": "CVE-2022-26388",
    "datePublished": "2025-02-07T17:06:30.134Z",
    "dateReserved": "2022-03-03T22:04:24.533Z",
    "dateUpdated": "2025-02-07T18:50:58.812Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "epss": {
      "cve": "CVE-2022-26388",
      "date": "2026-09-16",
      "epss": "0.00266",
      "percentile": "0.18629"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-26388\",\"sourceIdentifier\":\"productsecurity@baxter.com\",\"published\":\"2025-02-07T17:15:21.960\",\"lastModified\":\"2026-06-17T04:35:08.587\",\"vulnStatus\":\"Deferred\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: \\n\\nVersions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph:\\n\\nVersions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph:\\n\\nVersions 2.1.2 and prior; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: \\n\\nVersions 2.2.0 and prior.\"},{\"lang\":\"es\",\"value\":\"Una vulnerabilidad en el uso de contrase\u00f1as codificadas de forma r\u00edgida puede permitir el abuso de la autenticaci\u00f3n. Este problema afecta al electrocardi\u00f3grafo en reposo ELI 380: versiones 2.6.0 y anteriores; al electrocardi\u00f3grafo en reposo ELI 280/BUR280/MLBUR 280: versiones 2.3.1 y anteriores; al electrocardi\u00f3grafo en reposo ELI 250c/BUR 250c: versiones 2.1.2 y anteriores; al electrocardi\u00f3grafo en reposo ELI 150c/BUR 150c/MLBUR 150c: versiones 2.2.0 y anteriores.\"}],\"affected\":[{\"source\":\"productsecurity@baxter.com\",\"affectedData\":[{\"vendor\":\"Welch Allyn\",\"product\":\"ELI 380 Resting Electrocardiograph\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"2.6.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Welch Allyn\",\"product\":\"ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"2.3.1\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Welch Allyn\",\"product\":\"ELI 250c/BUR 250c Resting Electrocardiograph\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"2.1.2\",\"versionType\":\"custom\",\"status\":\"affected\"}]},{\"vendor\":\"Welch Allyn\",\"product\":\"ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph\",\"defaultStatus\":\"unaffected\",\"versions\":[{\"version\":\"0\",\"lessThanOrEqual\":\"2.2.0\",\"versionType\":\"custom\",\"status\":\"affected\"}]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"productsecurity@baxter.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L\",\"baseScore\":6.4,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"HIGH\",\"availabilityImpact\":\"LOW\"},\"exploitabilityScore\":0.9,\"impactScore\":5.5}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2025-02-07T18:50:50.198188Z\",\"id\":\"CVE-2022-26388\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"total\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"productsecurity@baxter.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-259\"}]}],\"references\":[{\"url\":\"https://hillrom.com/en/responsible-disclosures/\",\"source\":\"productsecurity@baxter.com\"},{\"url\":\"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-167-01\",\"source\":\"productsecurity@baxter.com\"}]}}",
    "redhat_vex": {
      "current_release_date": "2026-01-09T09:11:37+00:00",
      "cve": "CVE-2022-26388",
      "id": "CVE-2022-26388",
      "initial_release_date": "2022-01-01T00:00:00+00:00",
      "product_status:known_not_affected": "1",
      "source": "Red Hat CSAF VEX",
      "status": "final",
      "title": "Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices",
      "url": "https://security.access.redhat.com/data/csaf/v2/vex/2022/cve-2022-26388.json",
      "version": "3"
    },
    "vulnrichment": {
      "containers": "{\"adp\": [{\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2022-26388\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"total\"}], \"version\": \"2.0.3\", \"timestamp\": \"2025-02-07T18:50:50.198188Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2025-02-07T18:50:43.780Z\"}}], \"cna\": {\"title\": \"Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices\", \"source\": {\"advisory\": \"ICSMA-22-167-01\", \"discovery\": \"EXTERNAL\"}, \"credits\": [{\"lang\": \"en\", \"type\": \"finder\", \"value\": \"An anonymous user reported these vulnerabilities to Hillrom.\"}], \"impacts\": [{\"capecId\": \"CAPEC-114\", \"descriptions\": [{\"lang\": \"en\", \"value\": \"CAPEC-114 Authentication Abuse\"}]}], \"metrics\": [{\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.4, \"attackVector\": \"PHYSICAL\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L\", \"integrityImpact\": \"HIGH\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"LOW\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"HIGH\"}, \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"affected\": [{\"vendor\": \"Welch Allyn\", \"product\": \"ELI 380 Resting Electrocardiograph\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2.6.0\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Welch Allyn\", \"product\": \"ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2.3.1\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Welch Allyn\", \"product\": \"ELI 250c/BUR 250c Resting Electrocardiograph\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2.1.2\"}], \"defaultStatus\": \"unaffected\"}, {\"vendor\": \"Welch Allyn\", \"product\": \"ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"versionType\": \"custom\", \"lessThanOrEqual\": \"2.2.0\"}], \"defaultStatus\": \"unaffected\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"Hillrom has released software updates for all impacted devices to \\naddress these vulnerabilities. New product versions that mitigate these \\nvulnerabilities are available as follows:\\n\\n\\n\\n  *  Welch Allyn ELI 380 Resting Electrocardiograph: available Q4 2023\\n\\n  *  Welch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: available May 2022\\n\\n  *  Welch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: available Q4 2023\\n\\n\\n\\n\\n\\n\\nHillrom recommends users upgrade to the latest product versions. \\nInformation on how to update these products can be found on the  Hillrom disclosure page https://hillrom.com/en/responsible-disclosures/ .\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eHillrom has released software updates for all impacted devices to \\naddress these vulnerabilities. New product versions that mitigate these \\nvulnerabilities are available as follows:\u003c/p\u003e\\n\u003cul\u003e\\n\u003cli\u003eWelch Allyn ELI 380 Resting Electrocardiograph: available Q4 2023\u003c/li\u003e\\n\u003cli\u003eWelch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: available May 2022\u003c/li\u003e\\n\u003cli\u003eWelch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: available Q4 2023\u003c/li\u003e\\n\u003c/ul\u003e\\n\\n\\nHillrom recommends users upgrade to the latest product versions. \\nInformation on how to update these products can be found on the \u003ca target=\\\"_blank\\\" rel=\\\"nofollow\\\" href=\\\"https://hillrom.com/en/responsible-disclosures/\\\"\u003eHillrom disclosure page\u003c/a\u003e.\\n\\n\u003cbr\u003e\", \"base64\": false}]}], \"references\": [{\"url\": \"https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-167-01\"}, {\"url\": \"https://hillrom.com/en/responsible-disclosures/\"}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"Hillrom recommends the following workarounds to help reduce risk:\\n\\n\\n\\n  *  Apply proper network and physical security controls.\\n\\n  *  Ensure a unique encryption key is configured for ELI Link and Cardiograph.\\n\\n  *  Where possible, use a firewall to prevent communication on Port 21 \\nFTP service, Port 22 SSH (Secure Shell Connection), and Port 23 Telnet \\nservice.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"\u003cp\u003eHillrom recommends the following workarounds to help reduce risk:\u003c/p\u003e\\n\u003cul\u003e\\n\u003cli\u003eApply proper network and physical security controls.\u003c/li\u003e\\n\u003cli\u003eEnsure a unique encryption key is configured for ELI Link and Cardiograph.\u003c/li\u003e\\n\u003cli\u003eWhere possible, use a firewall to prevent communication on Port 21 \\nFTP service, Port 22 SSH (Secure Shell Connection), and Port 23 Telnet \\nservice.\u003c/li\u003e\\n\u003c/ul\u003e\\n\\n\u003cbr\u003e\", \"base64\": false}]}], \"x_generator\": {\"engine\": \"Vulnogram 0.2.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph: \\n\\nVersions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph:\\n\\nVersions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph:\\n\\nVersions 2.1.2 and prior; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: \\n\\nVersions 2.2.0 and prior.\", \"supportingMedia\": [{\"type\": \"text/html\", \"value\": \"A use of hard-coded password vulnerability may allow authentication abuse.\u003cp\u003eThis issue affects ELI 380 Resting Electrocardiograph: \\n\\n\u003cspan style=\\\"background-color: rgb(255, 255, 255);\\\"\u003eVersions 2.6.0 and prior\u003c/span\u003e; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph:\\n\\n\u003cspan style=\\\"background-color: rgb(255, 255, 255);\\\"\u003eVersions 2.3.1 and prior\u003c/span\u003e; ELI 250c/BUR 250c Resting Electrocardiograph:\\n\\n\u003cspan style=\\\"background-color: rgb(255, 255, 255);\\\"\u003eVersions 2.1.2 and prior\u003c/span\u003e; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: \\n\\n\u003cspan style=\\\"background-color: rgb(255, 255, 255);\\\"\u003eVersions 2.2.0 and prior\u003c/span\u003e.\u003c/p\u003e\", \"base64\": false}]}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-259\", \"description\": \"CWE-259 Use of Hard-Coded Password\"}]}], \"providerMetadata\": {\"orgId\": \"dba971b9-eb30-4121-91e1-3b45611354aa\", \"shortName\": \"Baxter\", \"dateUpdated\": \"2025-02-07T17:06:30.134Z\"}}}",
      "cveMetadata": "{\"cveId\": \"CVE-2022-26388\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2025-02-07T18:50:58.812Z\", \"dateReserved\": \"2022-03-03T22:04:24.533Z\", \"assignerOrgId\": \"dba971b9-eb30-4121-91e1-3b45611354aa\", \"datePublished\": \"2025-02-07T17:06:30.134Z\", \"assignerShortName\": \"Baxter\"}",
      "dataType": "CVE_RECORD",
      "dataVersion": "5.1"
    }
  }
}



Log in or create an account to share your comment.




Tags
Taxonomy of the tags.





Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.

Sightings

Author Source Type Date Other

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Detection rules are retrieved from Rulezet.


Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.