Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-crq7-9m4m-xx27

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.

EPSS

Процентиль: 22%
0.0007
Низкий

Связанные уязвимости

CVSS3: 7.5
nvd
больше 5 лет назад

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.

EPSS

Процентиль: 22%
0.0007
Низкий