Baxter vulnerabilities

Products

• Sigma Spectrum Infusion System Firmware 10
• Life2000 Ventilation System 8
• Life2000 Ventilator Firmware 8
• Em1200 Firmware 6
• Em2400 Firmware 6
• Spectrum Iq 35700bax3 Firmware 4
• Spectrum Wireless Battery Module (wbm) 4
• Sigma Spectrum 35700bax2 Firmware 4
• Sigma Spectrum 35700bax Firmware 4
• Sigma Spectrum Infusion System 4
• Spectrum Wireless Battery Module Firmware 4
• Prismaflex Firmware 3
• Prismax Firmware 3
• Connex Health Portal 2
• Connex Health Portal 2

Newest

• baxter life2000 ventilation system, life2000 ventilator firmware +1 more Life2000 ventilator and Service PC lack sufficient audit logging capabilities CVE-2024-48967 10.0 CriticalNovember 14, 2024
• baxter life2000 ventilation system, life2000 ventilator firmware +1 more Life2000 service tools for test and calibration do not support user authentication CVE-2024-48966 10.0 CriticalNovember 14, 2024
• baxter life2000 ventilation system, life2000 ventilator firmware +1 more Life2000 Ventilator microcontroller lacks memory protection CVE-2024-48970 9.3 CriticalNovember 14, 2024
• baxter life2000 ventilation system, life2000 ventilator firmware +1 more Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates CVE-2024-48974 9.3 CriticalNovember 14, 2024
• baxter life2000 ventilation system, life2000 ventilator firmware +1 more Debug port on Life2000 Ventilator serial interface is enabled by default CVE-2024-48973 9.3 CriticalNovember 14, 2024
• baxter life2000 ventilation system, life2000 ventilator firmware +1 more Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator CVE-2024-48971 9.3 CriticalNovember 14, 2024
• baxter life2000 ventilation system, life2000 ventilator firmware +1 more No limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 Ventilator CVE-2024-9832 9.3 CriticalNovember 14, 2024
• baxter life2000 ventilation system, life2000 ventilator firmware +1 more Improper data protection on Life2000 ventilator serial interface CVE-2024-9834 9.3 CriticalNovember 14, 2024
• baxter connex health portal Vulnerability in Baxter Connex Health Portal CVE-2024-6796 8.2 HighSeptember 9, 2024
• baxter connex health portal Vulnerability in Baxter Connex Health Portal CVE-2024-6795 10.0 CriticalSeptember 9, 2024
• baxter welch allyn configuration tool Vulnerability in Welch Allyn Configuration Tool Software CVE-2024-5176 9.4 CriticalMay 31, 2024
• baxter welch allyn connex spot monitor Vulnerability in Baxter Welch Allyn Connex Spot Monitor CVE-2024-1275 9.1 CriticalMay 31, 2024
• baxter spectrum wireless battery module (wbm), spectrum iq 35700bax3 firmware, sigma spectrum 35700bax2 firmware +2 more +4 more Format String vulnerability CVE-2022-26393 5.0 MediumSeptember 9, 2022
• baxter spectrum wireless battery module (wbm), spectrum iq 35700bax3 firmware, sigma spectrum 35700bax2 firmware +2 more +4 more Format String vulnerability CVE-2022-26392 3.1 LowSeptember 9, 2022
• baxter spectrum wireless battery module (wbm), spectrum iq 35700bax3 firmware, sigma spectrum 35700bax2 firmware +2 more +4 more Unencrypted internal storage of security credentials CVE-2022-26390 4.2 MediumSeptember 9, 2022
• baxter spectrum wireless battery module (wbm), spectrum iq 35700bax3 firmware, sigma spectrum 35700bax2 firmware +2 more +4 more Unauthenticated network reconfiguration via TCP/UDP CVE-2022-26394 5.5 MediumSeptember 9, 2022
• baxter welch allyn connex cardio, welch allyn diagnostic cardiology suite, welch allyn hscribe holter analysis system firmware +9 more +11 more ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products CVE-2021-43935 8.1 HighDecember 15, 2021
• baxter em1200 firmware, em2400 firmware +1 more Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14,... CVE-2020-12012 6.1 MediumJune 29, 2020
• baxter em1200 firmware, em2400 firmware +1 more Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14,... CVE-2020-12016 9.8 CriticalJune 29, 2020
• baxter em1200 firmware, em2400 firmware +1 more Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use... CVE-2020-12008 7.5 HighJune 29, 2020
• baxter em1200 firmware, em2400 firmware +1 more Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store... CVE-2020-12032 9.1 CriticalJune 29, 2020
• baxter em1200 firmware, em2400 firmware +1 more Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2,... CVE-2020-12020 6.1 MediumJune 29, 2020
• baxter em1200 firmware, em2400 firmware +1 more Baxter ExactaMix EM 2400 versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2,... CVE-2020-12024 6.1 MediumJune 29, 2020
• baxter prismaflex firmware, prismax firmware +1 more Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not... CVE-2020-12036 7.5 HighJune 29, 2020
• baxter prismaflex firmware, prismax firmware +1 more Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains... CVE-2020-12035 4.9 MediumJune 29, 2020
• baxter prismaflex firmware, prismax firmware +1 more Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not... CVE-2020-12037 7.5 HighJune 29, 2020
• baxter phoenix x36 firmware Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not... CVE-2020-12048 7.5 HighJune 29, 2020
• baxter sigma spectrum infusion system firmware Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System... CVE-2020-12040 9.8 CriticalJune 29, 2020
• baxter sigma spectrum infusion system firmware Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX &... CVE-2020-12039 2.4 LowJune 29, 2020
• baxter sigma spectrum infusion system firmware The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface,... CVE-2020-12041 9.4 CriticalJune 29, 2020
• baxter sigma spectrum infusion system firmware The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a... CVE-2020-12045 9.8 CriticalJune 29, 2020
• baxter sigma spectrum infusion system firmware The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless... CVE-2020-12043 9.8 CriticalJune 29, 2020
• baxter sigma spectrum infusion system firmware The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter... CVE-2020-12047 9.8 CriticalJune 29, 2020
• baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 more Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module ... CVE-2014-5431 6.8 MediumMarch 26, 2019
• baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 more Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module ... CVE-2014-5432 9.8 CriticalMarch 26, 2019
• baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 more An unauthenticated remote attacker may be able to execute commands to view wireless account... CVE-2014-5433 9.8 CriticalMarch 26, 2019
• baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 more Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module ... CVE-2014-5434 9.8 CriticalMarch 26, 2019