cve.bz

CVE-2020-12035

4.9 mediumEPSS 0.2%

Medium (4.9) in baxter. EPSS 0.2% chance of exploitation in the next 30 days.

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings and calibration.

Severity

CVSS 3.1

4.9 medium
CVSS:3.1/AV:P/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:L
EPSS
0.2% chance of exploitation in the next 30 days; higher than 16% of CVEs (scores of 2026-10-31)
CWEs
CWE-798, CWE-287
Published
Modified
Record from
the NVD, synced

Affected

References

Check your stackJSON