Skip to content
Sign in
Not rated

CVE-2020-12036 Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit…

Description

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.

Affected products and versions

Product Affected versions Fixed in
Baxter PrismaFlex and PrisMax Versions not published

Other CVEs of Baxter PrismaFlex and PrisMax

The 3 CVEs of Baxter PrismaFlex and PrisMax →
CVE-2020-12035 Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service… Not rated CVE-2020-12037 Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit… Not rated
Track this CVE