Fortinet FortiFone IP phones Information Disclosure

The vulnerability of Fortinet FortiFone IP phones’ microprogramming software is related to information disclosure. Exploiting this vulnerability can allow a malicious actor to gain access to device system settings by sending specially crafted HTTP requests...

CVE-2020-12035

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings...