High severity8.1NVD Advisory· Published Dec 15, 2021· Updated Jun 17, 2026
CVE-2021-43935
CVE-2021-43935
Description
The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability. This vulnerability allows the application to accept manual entry of any active directory (AD) account provisioned in the application without supplying a password, resulting in access to the application as the supplied AD account, with all associated privileges.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
9- cpe:2.3:a:baxter:welch_allyn_connex_cardio:*:*:*:*:*:*:*:*Range: >=1.0.0,<=1.1.1
- cpe:2.3:a:baxter:welch_allyn_diagnostic_cardiology_suite:2.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:baxter:welch_allyn_rscribe_resting_ecg_system:*:*:*:*:*:*:*:*Range: >=5.01,<=7.0.0
- cpe:2.3:a:baxter:welch_allyn_vision_express_holter_analysis_system:*:*:*:*:*:*:*:*Range: >=6.1.0,<=6.4.0
- cpe:2.3:o:baxter:welch_allyn_hscribe_holter_analysis_system_firmware:*:*:*:*:*:*:*:*Range: >=5.01,<=6.4.0
- cpe:2.3:o:baxter:welch_allyn_q-stress_cardiac_stress_testing_system_firmware:*:*:*:*:*:*:*:*Range: >=6.0.0,<=6.3.1
- cpe:2.3:o:baxter:welch_allyn_xscribe_cardiac_stress_testing_system_firmware:*:*:*:*:*:*:*:*Range: >=5.01,<=6.3.1
- Range: 5.01
- Range: 5.01
Patches
Vulnerability mechanics
References
1- www.cisa.gov/uscert/ics/advisories/icsma-21-343-01nvdMitigationThird Party AdvisoryUS Government Resource
News mentions
0No linked articles in our index yet.