NetSight
critical9.1

CVE-2020-12032

Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted data…

Impact

Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with network access to view or modify sensitive data including PHI.

Affected products

VendorProductAffected versions
BaxterEm2400 Firmware
Versions 1.10, 1.11
BaxterEm1200 Firmware
Versions 1.1, 1.2

Weakness classification

References