Skip to content
OpenAdvisories
Critical · 9.3 CVE-2024-9834 EUVD-2024-50149GHSA-98vw-8q5h-p4pm

Improper data protection on Life2000 ventilator serial interface

Published Nov 14, 2024 · Updated Nov 15, 2024 · Assigned by Baxter

Description

Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance.

Affected products

VendorProductAffectedFixed
Baxter Life2000 Ventilation System 06.08.00.00 and prior —

Advisories 1

References