Description
The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Baxter | Life2000 Ventilation System | 06.08.00.00 and prior | — |
Advisories 1
- ICSMA-24-319-01 Baxter Life2000 Ventilation System CISA ICS & IT advisories · Nov 14, 2024