| Type of Product |
Medical Device |
| TGA Recall Reference |
RC-2024-RN-00745-1 |
| Product Name/Description |
Welch Allyn Configuration Tool
Versions: 1.9.4.1 and prior
ARTG not on the register |
| Recall Action Level |
Hospital |
| Recall Action Classification |
Class II |
| Recall Action Commencement Date |
21/08/2024 |
| Responsible Entity |
|
| Reason/Issue |
Baxter Healthcare Corporation is aware of a potential cybersecurity risk of using the Welch Allyn Configuration Tool with Welch Allyn Connex products and the use of web browsers with password manager functionality.
The Configuration Tool is a web-based portal that can be used to customise the configuration settings on your Welch Allyn Connex patient monitoring device. Browsers with password manager functionality will auto-populate saved login credentials in various fields within the configuration file that will be applied to the Welch Allyn Connex Spot Monitor, Welch Allyn Connex Vital Signs Monitor, and the Welch Allyn Connex Integrated Wall System which could allow non-approved users access to the configuration file.
Baxter is not aware of any exploitation of this vulnerability or of any personal or health information data being compromised as a result. |
| Recall Action |
Product Defect Correction |
| Recall Action Instructions |
Customers should be aware that credentials that were input into Welch Allyn Configuration Tool files have the potential to be compromised and should be changed immediately.
Baxter has released an updated version of the Welch Allyn Configuration Tool and customers should reset their login credentials using the updated Configuration Tool. |
| Contact Information |
1800 445 576 - Baxter Healthcare Customer Service |