CVE-2020-12037

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption e.g., TLS/SSL when configured to send treatment data to a PDMS Patient Data Management System or an EMR Electronic Medical Record system. An attacker could observe...

CVE-2020-12037

CVE-2020-12037 affects Baxter PrismaFlex (all versions) and PrisMax (all versions before 3.x). The root cause is a hard-coded service password (CWE-259), enabling an attacker to access device settings, calibration data, and network configuration. The ICS update also notes lack of data-in-transit ...