CVE-2020-12036CWE-319

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when…

published June 29, 2020

CVSS
—
EPSS
0%
Percentile
41.6
In the wild
Unconfirmed
What it is

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00496 · 41.6th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2020-06-29T13:49Z
EPSS history
Timeline
  • 29 JUN 13:49Z
    Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when…
    cvelistv5