Vulnetix
Try Vulnetix Request Demo
CVE-2020-12032 PUBLISHED CVSS 9.100000381469727 CRITICAL

Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with network access to view or modify sensitive data including PHI.

EPSS 0.11% · 29.4th percentile

Risk Scores

CVSS v3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS Score
0.11%
29.4th percentile

Affected Products

VendorProductVersions
n/aBaxter ExactaMix EM 2400 & EM 1200ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5
baxterem1200_firmware1.1, 1.2
baxterem2400_firmware1.10, 1.11

Timeline

References

Open in Interactive Console →