1. Home
  2. CVE Database
  3. CVE-2020-12032
CRITICAL · 9.1

CVE-2020-12032

Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with n...

Vulnerability Description

Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with network access to view or modify sensitive data including PHI.

CVSS Score

9.1

CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
BaxterEm2400 Firmware1.10
BaxterEm2400-
BaxterEm1200 Firmware1.1
BaxterEm1200-

Related Weaknesses (CWE)

CWE-312CWE-311

References

FAQ

What is CVE-2020-12032?

CVE-2020-12032 is a vulnerability with a CVSS score of 9.1 (CRITICAL). Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with n...

How severe is CVE-2020-12032?

CVE-2020-12032 has been rated CRITICAL with a CVSS base score of 9.1/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2020-12032?

Check the references section above for vendor advisories and patch information. Affected products include: Baxter Em2400 Firmware, Baxter Em2400, Baxter Em1200 Firmware, Baxter Em1200.