ZeroHour

CVE-2020-12035

CVSS 3.1
4.9 medium
EPSS
<1%p16
Published
()
Modified
Description

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings and calibration.

Vendors
baxter
Products
prismaflex firmware, prismax firmware
Weakness
CWE-287, CWE-798
Vector
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L

In the news

No ingested article mentions this CVE yet.