Approved changes feed: RSS · Atom

cpe:2.3:a:baxter:welch_allyn_connex_cardio:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBaxter (a179c94a-1aed-5d11-8395-fe3753820594)
ProductWelch Allyn Connex Cardio (1ce4db4c-3439-5a4b-bcb0-aef3f57beb98)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-43935 vulnerable 2026-06-03 14:45:35.248692 ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products
HIGH (8.1)
The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying a password, resulting in access to the application as the supplied AD account, with all associated privileges.
Published: 2021-12-15T18:05:16.799Z
Updated: 2024-09-16T23:11:47.219Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.