Description
The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Baxter | Life2000 Ventilation System | 06.08.00.00 and prior | — |
Advisories 1
- ICSMA-24-319-01 Baxter Life2000 Ventilation System CISA ICS & IT advisories · Nov 14, 2024