CVE-2024-48970 — Life2000 Ventilator microcontroller lacks memory protection

CVE-2024-48970

Life2000 Ventilator microcontroller lacks memory protection PUBLISHED

Description (CNA)

The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure.

Affected (CNA)

Vendor / product	Versions
Baxter / Life2000 Ventilation System	affected 06.08.00.00 and prior

CWE

CWE-1191

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.