CVE-2020-12036
Summary
| CVE | CVE-2020-12036 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2020-06-29 14:15:00 UTC |
| Updated | 2020-07-14 15:40:00 UTC |
| Description | Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device. |
Risk And Classification
Problem Types: CWE-319
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Baxter | Prismaflex | - | All | All | All |
| Hardware | Baxter | Prismaflex | - | All | All | All |
| Operating System | Baxter | Prismaflex Firmware | All | All | All | All |
| Operating System | Baxter | Prismaflex Firmware | All | All | All | All |
| Hardware | Baxter | Prismax | - | All | All | All |
| Hardware | Baxter | Prismax | - | All | All | All |
| Operating System | Baxter | Prismax Firmware | All | All | All | All |
| Operating System | Baxter | Prismax Firmware | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Baxter ExactaMix (Update A) | CISA | MISC | www.us-cert.gov | Not Applicable |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.