CVE-2020-12008

HIGH

Baxter ExactaMix EM 2400 and EM1200 - Cleartext Transmission of Sensitive Order Information

Title source: llm

Description

Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order information with an order entry system. This could allow an attacker with network access to view sensitive data including PHI.

References (1)

Core 1

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://www.us-cert.gov/ics/advisories/icsma-20-170-01

Scores

CVSS v3 7.5

EPSS 0.0095

EPSS Percentile 56.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

CWE

CWE-319

Status published

Products (4)

baxter/em1200_firmware 1.1

baxter/em1200_firmware 1.2

baxter/em2400_firmware 1.10

baxter/em2400_firmware 1.11

Published Jun 29, 2020

Tracked Since Feb 18, 2026