CVE-2021-43935

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying a password, resulting in access to the application as the supplied AD account, with all associated privileges.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-288 CWE-287

Affected software

Vendor	Product	Versions
Hillrom	Welch Allyn Q-Stress Cardiac Stress Testing System	>= 6.0.0, <= 6.3.1
Hillrom	Welch Allyn X-Scribe Cardiac Stress Testing System	>= 5.01, <= 6.3.1
Hillrom	Welch Allyn Diagnostic Cardiology Suite	2.1.0
Hillrom	Welch Allyn Vision Express	>= 6.1.0, <= 6.4.0
Hillrom	Welch Allyn H-Scribe Holter Analysis System	>= 5.01, <= 6.4.0
Hillrom	Welch Allyn R-Scribe Resting ECG System	>= 5.01, <= 7.0.0
Hillrom	Welch Allyn Connex Cardio	>= 1.0.0, <= 1.1.1

References

https://www.cisa.gov/uscert/ics/advisories/icsma-21-343-01Mitigation, Third Party Advisory, US Government Resource
https://www.cisa.gov/uscert/ics/advisories/icsma-21-343-01Mitigation, Third Party Advisory, US Government Resource

Timeline

Published: Dec 15, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-439369.8The software allows the attacker to upload or transfer files of dangerous types to the WebHMI portal, that may be automatically processed wi CVE-2021-439378.8Elcomplus SmartPTT SCADA Server web application does not, or cannot, sufficiently verify whether a well-formed, valid, consistent request wa CVE-2021-439389.8Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authenticatio CVE-2021-439398.8Elcomplus SmartPTT is vulnerable when a low-authenticated user can access higher level administration authorization by issuing requests dire CVE-2021-43944.3The Locations plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 3.2.1. This is due to missi CVE-2021-439407.8Affected versions of Atlassian Confluence Server and Data Center allow authenticated local attackers to achieve elevated privileges on the l CVE-2021-439416.5Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify several resources (including CsvFieldMappingsPag CVE-2021-439426.1Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a Reflected Cro CVE-2021-439434.8Affected versions of Atlassian Jira Service Management Server and Data Center allow attackers with administrator privileges to inject arbitr CVE-2021-439447.2This issue exists to document that a security improvement in the way that Jira Server and Data Center use templates has been implemented. Af CVE-2021-439454.8Affected versions of Atlassian Jira Server and Data Center allow remote attackers with Roadmaps Administrator permissions to inject arbitrar CVE-2021-439466.5Affected versions of Atlassian Jira Server and Data Center allow authenticated remote attackers to add administrator groups to filter subscr