CVE-2022-26388CWE-259

Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices

Medium · published February 7, 2025

CVSS v3.1
6.4
EPSS
0%
Percentile
17.5
In the wild
Unconfirmed
What it is

A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting Electrocardiograph:

Versions 2.6.0 and prior; ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph:

Versions 2.3.1 and prior; ELI 250c/BUR 250c Resting Electrocardiograph:

Versions 2.1.2 and prior; ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph:

Versions 2.2.0 and prior.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
CVSS v4.0
Not supplied
EPSS
0.00266 · 17.5th percentile
Weakness
CWE-259 · Use of Hard-coded Password
Published
2025-02-07T17:06Z
EPSS history
Timeline
  • 07 FEB 17:06Z
    Use of Hard-Coded Password Vulnerability in ELI Electrocardiograph Devices
    cvelistv5