Skip to content
Noroxi

Baxter records

37 published records for vendor baxter.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
5.4%
Median publish → KEV
No record has entered KEV

Records by year

  1. 19
  2. 20
  3. 21
  4. 22
  5. 24

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

37 records
  • CVE-2014-5432
    40Plan

    Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via

    CriticalCVSS 9.8No exploitEPSS 3%

    baxter · sigma spectrum infusion system firmwareMar 26, 2019

  • CVE-2020-12043
    40Plan

    The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the W

    CriticalCVSS 9.8No exploitEPSS 2%

    baxter · sigma spectrum infusion system firmwareJun 29, 2020

  • CVE-2014-5433
    40Plan

    An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxt

    CriticalCVSS 9.8No exploitEPSS 2%

    baxter · sigma spectrum infusion system firmwareMar 26, 2019

  • CVE-2020-12016
    40Plan

    Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5,

    CriticalCVSS 9.8No exploitEPSS 2%

    baxter · em2400 firmwareJun 29, 2020

  • CVE-2020-12047
    40Plan

    The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-defa

    CriticalCVSS 9.8No exploitEPSS 2%

    baxter · sigma spectrum infusion system firmwareJun 29, 2020

  • CVE-2020-12045
    40Plan

    The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), op

    CriticalCVSS 9.8No exploitEPSS 2%

    baxter · sigma spectrum infusion system firmwareJun 29, 2020

  • CVE-2024-48966
    40Plan

    Life2000 service tools for test and calibration do not support user authentication

    CriticalCVSS 10.0No exploitEPSS 1%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2024-48967
    40Plan

    Life2000 ventilator and Service PC lack sufficient audit logging capabilities

    CriticalCVSS 10.0No exploitEPSS 1%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2014-5434
    39Monitor

    Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with

    CriticalCVSS 9.8No exploitEPSS 2%

    baxter · sigma spectrum infusion system firmwareMar 26, 2019

  • CVE-2021-43935
    39Monitor

    ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products

    CriticalCVSS 9.8No exploitEPSS 1%

    baxter · welch allyn connex cardioDec 15, 2021

  • CVE-2020-12040
    39Monitor

    Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the applicati

    CriticalCVSS 9.8No exploitEPSS 1%

    baxter · sigma spectrum infusion system firmwareJun 29, 2020

  • CVE-2024-6795
    39Monitor

    Vulnerability in Baxter Connex Health Portal

    CriticalCVSS 9.8No exploitEPSS 1%

    baxter · connex health portalSep 9, 2024

  • CVE-2020-12041
    37Monitor

    The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on t

    CriticalCVSS 9.4No exploitEPSS 1%

    baxter · sigma spectrum infusion system firmwareJun 29, 2020

  • CVE-2024-5176
    37Monitor

    Vulnerability in Welch Allyn Configuration Tool Software

    CriticalCVSS 9.4No exploitEPSS 0%

    baxter · welch allyn configuration toolMay 31, 2024

  • CVE-2024-48973
    37Monitor

    Debug port on Life2000 Ventilator serial interface is enabled by default

    CriticalCVSS 9.3No exploitEPSS 0%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2024-48971
    37Monitor

    Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator

    CriticalCVSS 9.3No exploitEPSS 0%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2024-48970
    37Monitor

    Life2000 Ventilator microcontroller lacks memory protection

    CriticalCVSS 9.3No exploitEPSS 0%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2024-9832
    37Monitor

    No limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 Ventilator

    CriticalCVSS 9.3No exploitEPSS 0%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2024-48974
    37Monitor

    Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates

    CriticalCVSS 9.3No exploitEPSS 0%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2024-9834
    37Monitor

    Improper data protection on Life2000 ventilator serial interface

    CriticalCVSS 9.3No exploitEPSS 0%

    baxter · life2000 ventilation systemNov 14, 2024

  • CVE-2020-12032
    36Monitor

    Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in

    CriticalCVSS 9.1No exploitEPSS 1%

    baxter · em2400 firmwareJun 29, 2020

  • CVE-2024-6796
    36Monitor

    Vulnerability in Baxter Connex Health Portal

    CriticalCVSS 9.1No exploitEPSS 0%

    baxter · connex health portalSep 9, 2024

  • CVE-2024-1275
    36Monitor

    Vulnerability in Baxter Welch Allyn Connex Spot Monitor

    CriticalCVSS 9.1No exploitEPSS 0%

    baxter · welch allyn connex spot monitorMay 31, 2024

  • CVE-2022-26393
    32Monitor

    Format String vulnerability

    HighCVSS 8.1No exploitEPSS 1%

    baxter · spectrum wireless battery module firmwareSep 9, 2022

  • CVE-2020-12008
    30Monitor

    Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order info

    HighCVSS 7.5No exploitEPSS 1%

    baxter · em2400 firmwareJun 29, 2020