CVE-2021-43935

The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying a password, resulting in access to the application as the supplied AD account, with all associated privileges.
References
Link Resource
https://www.cisa.gov/uscert/ics/advisories/icsma-21-343-01 Mitigation Third Party Advisory US Government Resource
Advertisement

NeevaHost hosting service

Configurations

Configuration 1 (hide)

OR cpe:2.3:a:baxter:welch_allyn_connex_cardio:*:*:*:*:*:*:*:*
cpe:2.3:a:baxter:welch_allyn_diagnostic_cardiology_suite:2.1.0:*:*:*:*:*:*:*
cpe:2.3:a:baxter:welch_allyn_rscribe_resting_ecg_system:*:*:*:*:*:*:*:*
cpe:2.3:a:baxter:welch_allyn_vision_express_holter_analysis_system:*:*:*:*:*:*:*:*

Configuration 2 (hide)

AND
cpe:2.3:o:baxter:welch_allyn_hscribe_holter_analysis_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:baxter:welch_allyn_hscribe_holter_analysis_system:-:*:*:*:*:*:*:*

Configuration 3 (hide)

AND
cpe:2.3:o:baxter:welch_allyn_q-stress_cardiac_stress_testing_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:baxter:welch_allyn_q-stress_cardiac_stress_testing_system:-:*:*:*:*:*:*:*

Configuration 4 (hide)

AND
cpe:2.3:o:baxter:welch_allyn_xscribe_cardiac_stress_testing_system_firmware:*:*:*:*:*:*:*:*
cpe:2.3:h:baxter:welch_allyn_xscribe_cardiac_stress_testing_system:-:*:*:*:*:*:*:*

Information

Published : 2021-12-15 11:15

Updated : 2022-07-25 03:39


NVD link : CVE-2021-43935

Mitre link : CVE-2021-43935


JSON object : View

CWE
CWE-287

Improper Authentication

Advertisement

dedicated server usa

Products Affected

baxter

  • welch_allyn_q-stress_cardiac_stress_testing_system
  • welch_allyn_vision_express_holter_analysis_system
  • welch_allyn_xscribe_cardiac_stress_testing_system_firmware
  • welch_allyn_q-stress_cardiac_stress_testing_system_firmware
  • welch_allyn_xscribe_cardiac_stress_testing_system
  • welch_allyn_hscribe_holter_analysis_system_firmware
  • welch_allyn_hscribe_holter_analysis_system
  • welch_allyn_rscribe_resting_ecg_system
  • welch_allyn_diagnostic_cardiology_suite
  • welch_allyn_connex_cardio