PatchTheCVECVEs published by Baxter
CVEs published by Baxter (CVE Numbering Authority). 12 tracked.
- CVE-2024-9834 CRITICAL 9.3 Improper data protection on the ventilator's serial interface could allow an attacker to send and receive mess
- CVE-2024-9832 CRITICAL 9.3 There is no limit on the number of failed login attempts permitted with the Clinician Password or the Serial N
- CVE-2024-6796 HIGH 8.2 UPGRADE In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been fo
- CVE-2024-6795 CRITICAL 10.0 UPGRADE In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have all
- CVE-2024-48974 CRITICAL 9.3 The ventilator does not perform proper file integrity checks when adopting firmware updates
- CVE-2024-48973 CRITICAL 9.3 The debug port on the ventilator's serial interface is enabled by default
- CVE-2024-48971 CRITICAL 9.3 The Clinician Password and Serial Number Clinician Password are hard-coded into the ventilator in plaintext fo
- CVE-2024-48970 CRITICAL 9.3 The ventilator's microcontroller lacks memory protection
- CVE-2024-48967 CRITICAL 10.0 The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicio
- CVE-2024-48966 CRITICAL 10.0 The software tools used by service personnel to test & calibrate the ventilator do not support user authentica
- CVE-2022-26389 HIGH 7.7 An improper access control vulnerability may allow privilege escalation.This issue affects: * ELI 380 Res
- CVE-2022-26388 MEDIUM 6.4 A use of hard-coded password vulnerability may allow authentication abuse.This issue affects ELI 380 Resting E