CVE-2022-26389: Baxter/ Hillrom Eli 380 Resting Electrocardiograph

High severity, CVSS 7.7. EPSS: 0.3% chance of exploitation in the next 30 days.

An improper access control vulnerability may allow privilege escalation.This issue affects:  * ELI 380 Resting Electrocardiograph: Versions 2.6.0 and prior;  * ELI 280/BUR280/MLBUR 280 Resting Electrocardiograph: Versions 2.3.1 and prior;  * ELI 250c/BUR 250c Resting Electrocardiograph: Versions 2.1.2 and prior;  * ELI 150c/BUR 150c/MLBUR 150c Resting Electrocardiograph: Versions 2.2.0 and prior.

Affected products

• Baxter/ Hillrom Eli 380 Resting Electrocardiograph: up to and including 2.6.0
• Welch Allyn Eli 150c/bur 150c/mlbur 150c Resting Electrocardiograph: up to and including 2.2.0
• Welch Allyn Eli 250c/bur 250c Resting Electrocardiograph: up to and including 2.1.2
• Welch Allyn Eli 280/bur280/mlbur 280 Resting Electrocardiograph: up to and including 2.3.1

Published 2025-02-07. Last modified 2026-06-17.