Log in Start free

Baxter

Products

ProductCVEsExploitedLatest
Life2000 Ventilation System8–Nov 14, 2024
Baxter Spectrum Wireless Battery Module (WBM)4–Sep 9, 2022
Connex Health Portal2–Sep 9, 2024
Welch Allyn Configuration Tool1–May 31, 2024
Welch Allyn Connex Spot Monitor1–May 31, 2024

Exploited and recent CVEs

  • CVE-2024-48967 Critical 10.0 Life2000 ventilator and Service PC lack sufficient audit logging capabilities 0.6%
  • CVE-2024-48966 Critical 10.0 Life2000 service tools for test and calibration do not support user authentication 0.7%
  • CVE-2024-48970 Critical 9.3 Life2000 Ventilator microcontroller lacks memory protection 0.2%
  • CVE-2024-48974 Critical 9.3 Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates 0.2%
  • CVE-2024-48973 Critical 9.3 Debug port on Life2000 Ventilator serial interface is enabled by default 0.2%
  • CVE-2024-48971 Critical 9.3 Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator 0.2%
  • CVE-2024-9832 Critical 9.3 No limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 Ventilator 0.2%
  • CVE-2024-9834 Critical 9.3 Improper data protection on Life2000 ventilator serial interface 0.1%
  • CVE-2024-6796 High 8.2 Vulnerability in Baxter Connex Health Portal 0.4%
  • CVE-2024-6795 Critical 10.0 Vulnerability in Baxter Connex Health Portal 0.6%
  • CVE-2024-5176 Critical 9.4 Vulnerability in Welch Allyn Configuration Tool Software 0.5%
  • CVE-2024-1275 Critical 9.1 Vulnerability in Baxter Welch Allyn Connex Spot Monitor 0.4%
  • CVE-2022-26393 Medium 5.0 Format String vulnerability 0.7%
  • CVE-2022-26390 Medium 4.2 Unencrypted internal storage of security credentials 0.5%
  • CVE-2022-26392 Low 3.1 Format String vulnerability 0.7%
  • CVE-2022-26394 Medium 5.5 Unauthenticated network reconfiguration via TCP/UDP 0.4%