Read the docs

Baxter

Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical23CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Baxter records in CISA KEV

No Baxter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sigma Spectrum Infusion System Firmware 10 records MEDIUM Em1200 Firmware 6 records MEDIUM Em2400 Firmware 6 records MEDIUM Baxter Spectrum Iq 35700bax3 Firmware 4 records LOW Sigma Spectrum 35700bax2 Firmware 4 records LOW Sigma Spectrum 35700bax Firmware 4 records LOW Spectrum Wireless Battery Module Firmware 4 records LOW Prismaflex Firmware 3 records LOW

Records

3 records in Prismaflex Firmware · all components

TI-2020-09696 CVE-2020-12037 · GHSA-crq7-9m4m-xx27

Cleartext transmission of sensitive information in Baxter PrismaFlex and PrisMax

Priority LOW 33

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Managemen…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00483 Published 2020-06-29 No fix listed CWE-259
TI-2020-09695 CVE-2020-12036 · GHSA-cx3p-ghw7-pr4c

Cleartext transmission of sensitive information in Baxter PrismaFlex and PrisMax

Priority LOW 33

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Managemen…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00496 Published 2020-06-29 No fix listed CWE-319
TI-2020-09694 CVE-2020-12035 · GHSA-g2x6-q2j8-7r2x

Improper authentication in Baxter PrismaFlex and PrisMax

Priority LOW 22

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and n…

CVSS 3.1MEDIUM 4.9 Physical Low privileges No interaction EPSS 0.00247 Published 2020-06-29 No fix listed CWE-287
Open these records in search →