CVE-2020-12037: High severity prisma vulnerability
Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-12037?
CVE-2020-12037 is considered to have a high severity due to the lack of data-in-transit encryption, making it vulnerable to interception during transmission.
How do I fix CVE-2020-12037?
To fix CVE-2020-12037, ensure that data transmissions to PDMS and EMR are secured using TLS/SSL protocols.
Which devices are affected by CVE-2020-12037?
CVE-2020-12037 affects all versions of Baxter PrismaFlex and PrisMax prior to version 3.0.
What are the risks associated with CVE-2020-12037?
The main risk associated with CVE-2020-12037 is the potential interception of sensitive treatment data by unauthorized parties.
Can CVE-2020-12037 be exploited remotely?
Yes, CVE-2020-12037 can be exploited remotely due to the lack of encryption in data transmissions.