Baxter Life2000 Ventilation System

• CVE-2024-48967 Critical 10.0 Life2000 ventilator and Service PC lack sufficient audit logging capabilities 0.6%
• CVE-2024-48966 Critical 10.0 Life2000 service tools for test and calibration do not support user authentication 0.7%
• CVE-2024-48970 Critical 9.3 Life2000 Ventilator microcontroller lacks memory protection 0.2%
• CVE-2024-48974 Critical 9.3 Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates 0.2%
• CVE-2024-48973 Critical 9.3 Debug port on Life2000 Ventilator serial interface is enabled by default 0.2%
• CVE-2024-48971 Critical 9.3 Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator 0.2%
• CVE-2024-9832 Critical 9.3 No limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 Ventilator 0.2%
• CVE-2024-9834 Critical 9.3 Improper data protection on Life2000 ventilator serial interface 0.1%