CVE-2024-9834 — Improper data protection on Life2000 ventilator serial interface

CVE-2024-9834

Improper data protection on Life2000 ventilator serial interface PUBLISHED

Description (CNA)

Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance.

Affected (CNA)

Vendor / product	Versions
Baxter / Life2000 Ventilation System	affected 06.08.00.00 and prior

CWE

CWE-319

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.