Number: AV22-331
Date: 16 June 2022
On 16 June 2022 ICS-CERT published an ICS Advisory to highlight vulnerabilities in the following products:
- Welch Allyn ELI 380 Resting Electrocardiograph – version 2.6.0 and prior
- Welch Allyn ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph – version 2.3.1 and prior
- Welch Allyn ELI 250c/BUR 250c Resting Electrocardiograph – version 2.1.2 and prior
- Welch Allyn ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph – version 2.2.0 and prior
Exploitation of these vulnerabilities could result in command execution, privilege escalation or information disclosure.
The Cyber Centre encourages users and administrators to review the provided web link, perform the suggested mitigations and apply the necessary updates.