Baxter vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2024-48974 The ventilator does not perform proper file integrity checks when adopting firmware updates.Critical 9.3 · Nov 14, 2024
• CVE-2024-48973 The debug port on the ventilator's serial interface is enabled by default.Critical 9.3 · Nov 14, 2024
• CVE-2024-48971 The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext form.Critical 9.3 · Nov 14, 2024
• CVE-2024-48970 The ventilator's microcontroller lacks memory protection.Critical 9.3 · Nov 14, 2024
• CVE-2024-48967 The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination.Critical 10 · Nov 14, 2024
• CVE-2024-48966 The software tools used by service personnel to test & calibrate the ventilator do not support user authentication.Critical 10 · Nov 14, 2024
• CVE-2024-9834 Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of infCritical 9.3 · Nov 14, 2024
• CVE-2024-9832 There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial Number Clinician Password.Critical 9.3 · Nov 14, 2024
• CVE-2024-6796 In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker tHigh 8.2 · Sep 9, 2024
• CVE-2024-6795 In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthoriCritical 10 · Sep 9, 2024
• CVE-2024-5176 Insufficiently Protected Credentials vulnerability in Baxter Welch Allyn Configuration Tool may allow Remote Services with Stolen Credentials.This issue affectsCritical 9.4 · May 31, 2024
• CVE-2024-1275 Use of Default Cryptographic Key vulnerability in Baxter Welch Allyn Connex Spot Monitor may allow Configuration/Environment Manipulation.This issue affects WelCritical 9.1 · May 31, 2024
• CVE-2020-12048 Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption (e.g., TLS/SSL) when transmitHigh 7.5 · Jun 29, 2020
• CVE-2020-12047 The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuCritical 9.8 · Jun 29, 2020
• CVE-2020-12045 The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet servCritical 9.8 · Jun 29, 2020
• CVE-2020-12043 The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operationCritical 9.8 · Jun 29, 2020
• CVE-2020-12041 The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits Critical 9.4 · Jun 29, 2020
• CVE-2020-12040 Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unaCritical 9.8 · Jun 29, 2020
• CVE-2020-12037 Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configuHigh 7.5 · Jun 29, 2020
• CVE-2020-12036 Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configuHigh 7.5 · Jun 29, 2020
• CVE-2020-12032 Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted databCritical 9.1 · Jun 29, 2020
• CVE-2020-12016 Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EMCritical 9.8 · Jun 29, 2020
• CVE-2020-12008 Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order information with an ordeHigh 7.5 · Jun 29, 2020
• CVE-2014-5433 An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum InCritical 9.8 · Mar 26, 2019
• CVE-2014-5432 Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via Port 22/SSH withoutCritical 9.8 · Mar 26, 2019