CVE-2021-43935

baxter welch allyn connex cardio, baxter welch allyn diagnostic cardiology suite, baxter welch allyn rscribe resting ecg system +4 lainnya

TLP:CLEAR

csirt@kutim:~/threat-intel/cve/CVE-2021-43935

Katalog CVE

CVSS 9.8 · Critical EPSS 1,1%

Kerentanan Authentication Bypass Using an Alternate Path or Channel pada baxter welch allyn connex cardio, baxter welch allyn diagnostic cardiology suite +5 lainnya. Skor CVSS 3.1 9.8 (Critical) menurut NVD.

Deskripsi (NVD)

The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying a password, resulting in access to the application as the supplied AD account, with all associated privileges.

Rincian

Terbit di NVD
15 Desember 2021
Terakhir diubah
17 Juni 2026
Status NVD
Modified
CVSS 3.1
9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
Jenis kelemahan (CWE)
CWE-288: Authentication Bypass Using an Alternate Path or Channel
CWE-287: Improper Authentication
EPSS (30 hari)
1,1% peluang dieksploitasi; lebih tinggi dari 65,9% CVE lain

Produk dan versi terdampak

VendorProdukVersi terdampak
baxter welch allyn connex cardio Versi 1.0.0 hingga 1.1.1
baxter welch allyn diagnostic cardiology suite Versi 2.1.0
baxter welch allyn rscribe resting ecg system Versi 5.01 hingga 7.0.0
baxter welch allyn vision express holter analysis system Versi 6.1.0 hingga 6.4.0
baxter welch allyn hscribe holter analysis system firmware Versi 5.01 hingga 6.4.0
baxter welch allyn q-stress cardiac stress testing system firmware Versi 6.0.0 hingga 6.3.1
baxter welch allyn xscribe cardiac stress testing system firmware Versi 5.01 hingga 6.3.1

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:10 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.