BaxterVULNRICHMENT:CVE-2024-6795CVE-2024-6795 Vulnerability in Baxter Connex Health Portal
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
39.6%
SSVC
Exploitation
none
Automatable
yes
Technical Impact
total
In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex portal’s database.
An attacker could have submitted a crafted payload to Connex portal that could have resulted in modification and disclosure of database content
and/or perform administrative operations including shutting down the database.
ADP Affected
[
{
"cpes": [
"cpe:2.3:a:hillrom:connex_health_portal:*:*:*:*:*:*:*:*"
],
"vendor": "hillrom",
"product": "connex_health_portal",
"versions": [
{
"status": "affected",
"version": "0",
"lessThan": "8.30.2024",
"versionType": "custom"
}
],
"defaultStatus": "unaffected"
}
]Related
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
AI Score
Confidence
Low
EPSS
Percentile
39.6%
SSVC
Exploitation
none
Automatable
yes
Technical Impact
total