Baxter kayıtları
baxter üreticisine ait 37 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %5,4
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-259 Use of Hard-coded Password8
- CWE-319 Cleartext Transmission of Sensitive Information5
- CWE-284 Improper Access Control2
- CWE-306 Missing Authentication for Critical Function2
- CWE-311 Missing Encryption of Sensitive Data2
- CWE-134 Use of Externally-Controlled Format String2
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
37 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2014-5432İstismar yok | Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible viabaxter · sigma spectrum infusion system firmware · CWE-592 | Kritik9,8 | — | %2,6 | 26 Mar 2019 |
40Planlayın | CVE-2020-12043İstismar yok | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the Wbaxter · sigma spectrum infusion system firmware · CWE-672 | Kritik9,8 | — | %2,1 | 29 Haz 2020 |
40Planlayın | CVE-2014-5433İstismar yok | An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxtbaxter · sigma spectrum infusion system firmware · CWE-312 | Kritik9,8 | — | %2,1 | 26 Mar 2019 |
40Planlayın | CVE-2020-12016İstismar yok | Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5,baxter · em2400 firmware · CWE-259 | Kritik9,8 | — | %1,9 | 29 Haz 2020 |
40Planlayın | CVE-2020-12047İstismar yok | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-defabaxter · sigma spectrum infusion system firmware · CWE-259 | Kritik9,8 | — | %1,7 | 29 Haz 2020 |
40Planlayın | CVE-2020-12045İstismar yok | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), opbaxter · sigma spectrum infusion system firmware · CWE-259 | Kritik9,8 | — | %1,7 | 29 Haz 2020 |
40Planlayın | CVE-2024-48966İstismar yok | Life2000 service tools for test and calibration do not support user authenticationbaxter · life2000 ventilation system · CWE-306 | Kritik10,0 | — | %0,7 | 14 Kas 2024 |
40Planlayın | CVE-2024-48967İstismar yok | Life2000 ventilator and Service PC lack sufficient audit logging capabilitiesbaxter · life2000 ventilation system · CWE-778 | Kritik10,0 | — | %0,6 | 14 Kas 2024 |
39İzleyin | CVE-2014-5434İstismar yok | Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account withbaxter · sigma spectrum infusion system firmware · CWE-259 | Kritik9,8 | — | %1,6 | 26 Mar 2019 |
39İzleyin | CVE-2021-43935İstismar yok | ICSMA-21-343-01 Hillrom Welch Allyn Cardio Productsbaxter · welch allyn connex cardio · CWE-288 | Kritik9,8 | — | %1,1 | 15 Ara 2021 |
39İzleyin | CVE-2020-12040İstismar yok | Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the applicatibaxter · sigma spectrum infusion system firmware · CWE-319 | Kritik9,8 | — | %0,9 | 29 Haz 2020 |
39İzleyin | CVE-2024-6795İstismar yok | Vulnerability in Baxter Connex Health Portalbaxter · connex health portal · CWE-89 | Kritik9,8 | — | %0,6 | 9 Eyl 2024 |
37İzleyin | CVE-2020-12041İstismar yok | The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on tbaxter · sigma spectrum infusion system firmware · CWE-732 | Kritik9,4 | — | %1,4 | 29 Haz 2020 |
37İzleyin | CVE-2024-5176İstismar yok | Vulnerability in Welch Allyn Configuration Tool Softwarebaxter · welch allyn configuration tool · CWE-522 | Kritik9,4 | — | %0,5 | 31 May 2024 |
37İzleyin | CVE-2024-48973İstismar yok | Debug port on Life2000 Ventilator serial interface is enabled by defaultbaxter · life2000 ventilation system · CWE-1263 | Kritik9,3 | — | %0,2 | 14 Kas 2024 |
37İzleyin | CVE-2024-48971İstismar yok | Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilatorbaxter · life2000 ventilation system · CWE-798 | Kritik9,3 | — | %0,2 | 14 Kas 2024 |
37İzleyin | CVE-2024-48970İstismar yok | Life2000 Ventilator microcontroller lacks memory protectionbaxter · life2000 ventilation system · CWE-1191 | Kritik9,3 | — | %0,2 | 14 Kas 2024 |
37İzleyin | CVE-2024-9832İstismar yok | No limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 Ventilatorbaxter · life2000 ventilation system · CWE-307 | Kritik9,3 | — | %0,2 | 14 Kas 2024 |
37İzleyin | CVE-2024-48974İstismar yok | Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updatesbaxter · life2000 ventilation system · CWE-494 | Kritik9,3 | — | %0,2 | 14 Kas 2024 |
37İzleyin | CVE-2024-9834İstismar yok | Improper data protection on Life2000 ventilator serial interfacebaxter · life2000 ventilation system · CWE-319 | Kritik9,3 | — | %0,1 | 14 Kas 2024 |
36İzleyin | CVE-2020-12032İstismar yok | Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in baxter · em2400 firmware · CWE-311 | Kritik9,1 | — | %0,9 | 29 Haz 2020 |
36İzleyin | CVE-2024-6796İstismar yok | Vulnerability in Baxter Connex Health Portalbaxter · connex health portal · CWE-284 | Kritik9,1 | — | %0,4 | 9 Eyl 2024 |
36İzleyin | CVE-2024-1275İstismar yok | Vulnerability in Baxter Welch Allyn Connex Spot Monitorbaxter · welch allyn connex spot monitor · CWE-1394 | Kritik9,1 | — | %0,4 | 31 May 2024 |
32İzleyin | CVE-2022-26393İstismar yok | Format String vulnerabilitybaxter · spectrum wireless battery module firmware · CWE-134 | Yüksek8,1 | — | %0,7 | 9 Eyl 2022 |
30İzleyin | CVE-2020-12008İstismar yok | Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order infobaxter · em2400 firmware · CWE-319 | Yüksek7,5 | — | %0,9 | 29 Haz 2020 |
- CVE-2014-543240Planlayın
Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via
KritikCVSS 9,8İstismar yokEPSS %3baxter · sigma spectrum infusion system firmware26 Mar 2019
- CVE-2020-1204340Planlayın
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the W
KritikCVSS 9,8İstismar yokEPSS %2baxter · sigma spectrum infusion system firmware29 Haz 2020
- CVE-2014-543340Planlayın
An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxt
KritikCVSS 9,8İstismar yokEPSS %2baxter · sigma spectrum infusion system firmware26 Mar 2019
- CVE-2020-1201640Planlayın
Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5,
KritikCVSS 9,8İstismar yokEPSS %2baxter · em2400 firmware29 Haz 2020
- CVE-2020-1204740Planlayın
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-defa
KritikCVSS 9,8İstismar yokEPSS %2baxter · sigma spectrum infusion system firmware29 Haz 2020
- CVE-2020-1204540Planlayın
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), op
KritikCVSS 9,8İstismar yokEPSS %2baxter · sigma spectrum infusion system firmware29 Haz 2020
- CVE-2024-4896640Planlayın
Life2000 service tools for test and calibration do not support user authentication
KritikCVSS 10,0İstismar yokEPSS %1baxter · life2000 ventilation system14 Kas 2024
- CVE-2024-4896740Planlayın
Life2000 ventilator and Service PC lack sufficient audit logging capabilities
KritikCVSS 10,0İstismar yokEPSS %1baxter · life2000 ventilation system14 Kas 2024
- CVE-2014-543439İzleyin
Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with
KritikCVSS 9,8İstismar yokEPSS %2baxter · sigma spectrum infusion system firmware26 Mar 2019
- CVE-2021-4393539İzleyin
ICSMA-21-343-01 Hillrom Welch Allyn Cardio Products
KritikCVSS 9,8İstismar yokEPSS %1baxter · welch allyn connex cardio15 Ara 2021
- CVE-2020-1204039İzleyin
Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the applicati
KritikCVSS 9,8İstismar yokEPSS %1baxter · sigma spectrum infusion system firmware29 Haz 2020
- CVE-2024-679539İzleyin
Vulnerability in Baxter Connex Health Portal
KritikCVSS 9,8İstismar yokEPSS %1baxter · connex health portal9 Eyl 2024
- CVE-2020-1204137İzleyin
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on t
KritikCVSS 9,4İstismar yokEPSS %1baxter · sigma spectrum infusion system firmware29 Haz 2020
- CVE-2024-517637İzleyin
Vulnerability in Welch Allyn Configuration Tool Software
KritikCVSS 9,4İstismar yokEPSS %0baxter · welch allyn configuration tool31 May 2024
- CVE-2024-4897337İzleyin
Debug port on Life2000 Ventilator serial interface is enabled by default
KritikCVSS 9,3İstismar yokEPSS %0baxter · life2000 ventilation system14 Kas 2024
- CVE-2024-4897137İzleyin
Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator
KritikCVSS 9,3İstismar yokEPSS %0baxter · life2000 ventilation system14 Kas 2024
- CVE-2024-4897037İzleyin
Life2000 Ventilator microcontroller lacks memory protection
KritikCVSS 9,3İstismar yokEPSS %0baxter · life2000 ventilation system14 Kas 2024
- CVE-2024-983237İzleyin
No limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 Ventilator
KritikCVSS 9,3İstismar yokEPSS %0baxter · life2000 ventilation system14 Kas 2024
- CVE-2024-4897437İzleyin
Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates
KritikCVSS 9,3İstismar yokEPSS %0baxter · life2000 ventilation system14 Kas 2024
- CVE-2024-983437İzleyin
Improper data protection on Life2000 ventilator serial interface
KritikCVSS 9,3İstismar yokEPSS %0baxter · life2000 ventilation system14 Kas 2024
- CVE-2020-1203236İzleyin
Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in
KritikCVSS 9,1İstismar yokEPSS %1baxter · em2400 firmware29 Haz 2020
- CVE-2024-679636İzleyin
Vulnerability in Baxter Connex Health Portal
KritikCVSS 9,1İstismar yokEPSS %0baxter · connex health portal9 Eyl 2024
- CVE-2024-127536İzleyin
Vulnerability in Baxter Welch Allyn Connex Spot Monitor
KritikCVSS 9,1İstismar yokEPSS %0baxter · welch allyn connex spot monitor31 May 2024
- CVE-2022-2639332İzleyin
Format String vulnerability
YüksekCVSS 8,1İstismar yokEPSS %1baxter · spectrum wireless battery module firmware9 Eyl 2022
- CVE-2020-1200830İzleyin
Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order info
YüksekCVSS 7,5İstismar yokEPSS %1baxter · em2400 firmware29 Haz 2020