No image published for this recall

No image published for this recall

Welch allyn diagnostic cardiology products

Official notice

14 Feb 2022

Last checked

14 Feb 2022

Medium riskHealth Canada

An official Health Canada notice concerns Welch allyn diagnostic cardiology products. Hillrom has become aware of a vulnerability which allows the entry of any username that is provisioned in the application without supplying a password. This will then grant access to the application with the privileges of the username provided. The vulnerability occurs when customer activates single sign-on (SSO) feature in either stand alone, or client/server configurations. Recall start date: Jan 26, 2022 Published 2022-02-14.

What to do now

Contact the manufacturer if you require additional information.

Recall number

63925

Official notice

2022-02-14

The hazard

Hillrom has become aware of a vulnerability which allows the entry of any username that is provisioned in the application without supplying a password. This will then grant access to the application with the privileges of the username provided. The vulnerability occurs when customer activates single sign-on (SSO) feature in either stand alone, or client/server configurations. Recall start date: Jan 26, 2022

How to check if you're affected

Compare the product name and identifiers below with the item you own. Follow the official notice if they match.

Recall Numbers

63925

Checked manually this time?

The app alerts you when a new official recall is published — no searching, no checking back.

Turn on recall alerts

Affected products

Product 1

Affected Products - Q-Stress System, Lot or Serial Number - More than 10 numbers, contact manufacturer., Model or catalog number - QSERV-6AA-XXXXA, QR-6AC-AXXXX

Risk / hazard

Hillrom has become aware of a vulnerability which allows the entry of any username that is provisioned in the application without supplying a password. This will then grant access to the application with the privileges of the username provided. The vulnerability occurs when customer activates single sign-on (SSO) feature in either stand alone, or client/server configurations. Recall start date: Jan 26, 2022

Where it was sold

The source does not list specific retailers. See the official notice for where affected products were sold.

Location 1

CA · Canada

Affected area 1

CA · Canada

Company & contacts

Manufacturer

Not provided

Phone

Not provided

Brand: Welch Allyn, Welch Allyn Diagnostic Cardiology.

Source & status

Source

Health Canada

Tier

official

Category

HEALTH

Classification

Type II

App estimate

medium

Recall details

Recall number

63925

Classification

Type II

Source tier

official

Documents, notices & source

See the official notice and source documents for full details.

View full official notice
Something wrong on this page?

Weekly recall digest

Get next week's recalls before you need them.

One email every Monday — official-source recalls for your country, and nothing else. Unsubscribe from any email.

The digest is the slow lane — one email a week. For instant, severity-gated alerts the moment a notice is published, get the app.

This recall was published 14 Feb 2022. The next one won't wait for you to search.

RecallScope watches official sources for the brands and VINs you follow, and alerts you the moment a new notice is published.