GCVE - cpe:2.3:h:baxter:prismax:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:h:baxter:prismax:-:*:*:*:*:*:*:*

part: h version: - update: *

Vendor	Baxter (`a179c94a-1aed-5d11-8395-fe3753820594`)
Product	Prismax (`8e4aaded-aeee-5e57-ab8a-b19f3cf079ea`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-12037`	not_vulnerable	2026-06-03 14:41:33.185634	Details available Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device. Published: 2020-06-29T13:49:46.000Z Updated: 2024-08-04T11:48:57.853Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsma-20-170-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12036`	not_vulnerable	2026-06-03 14:41:33.185238	Details available Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device. Published: 2020-06-29T13:49:53.000Z Updated: 2024-08-04T11:48:57.981Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsma-20-170-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-12035`	not_vulnerable	2026-06-03 14:41:33.184739	Details available Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings and calibration. Published: 2020-06-29T13:49:50.000Z Updated: 2024-08-04T11:48:57.936Z Open on db.gcve.eu Reference links https://www.us-cert.gov/ics/advisories/icsma-20-170-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.