BA
Vendor
Baxter
72
CVEs
0
On KEV
0
New 30D
Products
SS9.8
Sigma Spectrum Infusion System Firmware
Baxter
10 CVEs0 on KEV0 new
LV10.0
Life2000 Ventilation System
Baxter
8 CVEs0 on KEV0 new
LV10.0
Life2000 Ventilator Firmware
Baxter
8 CVEs0 on KEV0 new
EF9.8
Em1200 Firmware
Baxter
6 CVEs0 on KEV0 new
EF9.8
Em2400 Firmware
Baxter
6 CVEs0 on KEV0 new
BS8.1
Baxter Spectrum IQ 35700bax3 Firmware
Baxter
4 CVEs0 on KEV0 new
SS8.1
Sigma Spectrum 35700bax Firmware
Baxter
4 CVEs0 on KEV0 new
SS8.1
Sigma Spectrum 35700bax2 Firmware
Baxter
4 CVEs0 on KEV0 new
SW8.1
Spectrum Wireless Battery Module Firmware
Baxter
4 CVEs0 on KEV0 new
PF7.5
Prismaflex Firmware
Baxter
3 CVEs0 on KEV0 new
PF7.5
Prismax Firmware
Baxter
3 CVEs0 on KEV0 new
CH9.8
Connex Health Portal
Baxter
2 CVEs0 on KEV0 new
PX7.5
Phoenix X36 Firmware
Baxter
1 CVEs0 on KEV0 new
WA9.4
Welch Allyn Configuration Tool
Baxter
1 CVEs0 on KEV0 new
WA9.8
Welch Allyn Connex Cardio
Baxter
1 CVEs0 on KEV0 new
WA9.1
Welch Allyn Connex Spot Monitor
Baxter
1 CVEs0 on KEV0 new
WA9.8
Welch Allyn Diagnostic Cardiology Suite
Baxter
1 CVEs0 on KEV0 new
WA9.8
Welch Allyn Hscribe Holter Analysis System Firmware
Baxter
1 CVEs0 on KEV0 new
WA9.8
Welch Allyn Q-stress Cardiac Stress Testing System Firmware
Baxter
1 CVEs0 on KEV0 new
WA9.8
Welch Allyn Rscribe Resting Ecg System
Baxter
1 CVEs0 on KEV0 new
WA9.8
Welch Allyn Vision Express Holter Analysis System
Baxter
1 CVEs0 on KEV0 new
WA9.8
Welch Allyn Xscribe Cardiac Stress Testing System Firmware
Baxter
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-48967 | LV Life2000 Ventilation System Baxter | 10.0 | Nov 14 | Life2000 ventilator and Service PC lack sufficient audit logging capabilities |
| CVE-2024-48966 | LV Life2000 Ventilation System Baxter | 10.0 | Nov 14 | Life2000 service tools for test and calibration do not support user authentication |
| CVE-2024-48970 | LV Life2000 Ventilation System Baxter | 9.3 | Nov 14 | Life2000 Ventilator microcontroller lacks memory protection |
| CVE-2024-48974 | LV Life2000 Ventilation System Baxter | 9.3 | Nov 14 | Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates |
| CVE-2024-48973 | LV Life2000 Ventilation System Baxter | 9.3 | Nov 14 | Debug port on Life2000 Ventilator serial interface is enabled by default |
| CVE-2024-48971 | LV Life2000 Ventilation System Baxter | 9.3 | Nov 14 | Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator |
| CVE-2024-9832 | LV Life2000 Ventilation System Baxter | 9.3 | Nov 14 | No limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 Ventilator |
| CVE-2024-9834 | LV Life2000 Ventilation System Baxter | 9.3 | Nov 14 | Improper data protection on Life2000 ventilator serial interface |
| CVE-2024-6796 | CH Connex Health Portal Baxter | 9.1 | Sep 9 | Vulnerability in Baxter Connex Health Portal |
| CVE-2024-6795 | CH Connex Health Portal Baxter | 9.8 | Sep 9 | Vulnerability in Baxter Connex Health Portal |
| CVE-2024-5176 | WA Welch Allyn Configuration Tool Baxter | 9.4 | May 31 | Vulnerability in Welch Allyn Configuration Tool Software |
| CVE-2024-1275 | WA Welch Allyn Connex Spot Monitor Baxter | 9.1 | May 31 | Vulnerability in Baxter Welch Allyn Connex Spot Monitor |
| CVE-2022-26394 | SW Spectrum Wireless Battery Module Firmware Baxter | 5.4 | Sep 9 | The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host |
| CVE-2022-26393 | SW Spectrum Wireless Battery Module Firmware Baxter | 8.1 | Sep 9 | The Baxter Spectrum WBM is susceptible to format string attacks via application messaging |
| CVE-2022-26392 | SW Spectrum Wireless Battery Module Firmware Baxter | 6.5 | Sep 9 | The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application… |
| CVE-2022-26390 | SS Sigma Spectrum 35700bax2 Firmware Baxter | 4.2 | Sep 9 | The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form |
| CVE-2021-43935 | WA Welch Allyn Connex Cardio Baxter | 9.8 | Dec 15 | The impacted products, when configured to use SSO, are affected by an improper authentication vulnerability |
| CVE-2020-12048 | PX Phoenix X36 Firmware Baxter | 7.5 | Jun 29 | Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption (e.g., TLS/SSL) when transmitting treatment and… |
| CVE-2020-12047 | SS Sigma Spectrum Infusion System Firmware Baxter | 9.8 | Jun 29 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an… |
| CVE-2020-12045 | SS Sigma Spectrum Infusion System Firmware Baxter | 9.8 | Jun 29 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet service on Port 1023… |
| CVE-2020-12043 | SS Sigma Spectrum Infusion System Firmware Baxter | 9.8 | Jun 29 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is… |
| CVE-2020-12041 | SS Sigma Spectrum Infusion System Firmware Baxter | 9.4 | Jun 29 | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary… |
| CVE-2020-12040 | SS Sigma Spectrum Infusion System Firmware Baxter | 9.8 | Jun 29 | Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unauthenticated… |
| CVE-2020-12039 | SS Sigma Spectrum Infusion System Firmware Baxter | 2.4 | Jun 29 | Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when… |
| CVE-2020-12037 | PF Prismaflex Firmware Baxter | 7.5 | Jun 29 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send… |
| CVE-2020-12036 | PF Prismaflex Firmware Baxter | 7.5 | Jun 29 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send… |
| CVE-2020-12035 | PF Prismaflex Firmware Baxter | 4.9 | Jun 29 | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information,… |
| CVE-2020-12032 | EF Em2400 Firmware Baxter | 9.1 | Jun 29 | Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database |
| CVE-2020-12024 | EF Em2400 Firmware Baxter | 6.1 | Jun 29 | Baxter ExactaMix EM 2400 versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 does not restrict access to the USB interface from an unauthorized… |
| CVE-2020-12020 | EF Em2400 Firmware Baxter | 6.1 | Jun 29 | Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 does not restrict non administrative users from gaining access to the… |
| CVE-2020-12016 | EF Em1200 Firmware Baxter | 9.8 | Jun 29 | Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions… |
| CVE-2020-12012 | EF Em2400 Firmware Baxter | 6.1 | Jun 29 | Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions… |
| CVE-2020-12008 | EF Em2400 Firmware Baxter | 7.5 | Jun 29 | Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order information with an order entry system |
| CVE-2014-5433 | SS Sigma Spectrum Infusion System Firmware Baxter | 9.8 | Mar 26 | An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System… |
| CVE-2014-5432 | SS Sigma Spectrum Infusion System Firmware Baxter | 9.8 | Mar 26 | Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via Port 22/SSH without authentication |
| CVE-2014-5431 | SS Sigma Spectrum Infusion System Firmware Baxter | 6.8 | Mar 26 | Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 contains a hard-coded password, which provides access to basic… |
| CVE-2014-5434 | SS Sigma Spectrum Infusion System Firmware Baxter | 9.8 | Mar 26 | Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the… |