CVE-2024-48973 — Debug port on Life2000 Ventilator serial interface is enabled by default

CVE-2024-48973

Debug port on Life2000 Ventilator serial interface is enabled by default PUBLISHED

Description (CNA)

The debug port on the ventilator's serial interface is enabled by default. This could allow an attacker to send and receive messages over the debug port (which are unencrypted; see 3.2.1) that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance.

Affected (CNA)

Vendor / product	Versions
Baxter / Life2000 Ventilation System	affected 06.08.00.00 and prior

CWE

CWE-1263

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.