Skip to content
OpenAdvisories
Unscored CVE-2020-12035 EUVD-2020-4351GHSA-g2x6-q2j8-7r2x

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provid…

Published Jun 29, 2020 · Updated Aug 4, 2024 · Assigned by icscert

Description

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings and calibration.

Affected products

VendorProductAffectedFixed
— Baxter PrismaFlex and PrisMax PrismaFlex all versions, PrisMax all versions prior to 3.x —

Advisories 1

References