Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: Baxter Component: Prismaflex Firmware Clear all filters
TI-2020-09695 CVE-2020-12036 · GHSA-cx3p-ghw7-pr4c

Cleartext transmission of sensitive information in Baxter PrismaFlex and PrisMax

Priority LOW 33

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Managemen…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00496 Published 2020-06-29 No fix listed CWE-319
TI-2020-09694 CVE-2020-12035 · GHSA-g2x6-q2j8-7r2x

Improper authentication in Baxter PrismaFlex and PrisMax

Priority LOW 22

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and n…

CVSS 3.1MEDIUM 4.9 Physical Low privileges No interaction EPSS 0.00247 Published 2020-06-29 No fix listed CWE-287
TI-2020-09696 CVE-2020-12037 · GHSA-crq7-9m4m-xx27

Cleartext transmission of sensitive information in Baxter PrismaFlex and PrisMax

Priority LOW 33

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Managemen…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00483 Published 2020-06-29 No fix listed CWE-259