CVE-2024-9834

9.3 criticalEPSS 0.1%

Critical (9.3). EPSS 0.1% chance of exploitation in the next 30 days.

Improper data protection on the ventilator's serial interface could allow an attacker to send and receive messages that result in unauthorized disclosure of information and/or have unintended impacts on device settings and performance.

Severity

CVSS 3.1

9.3 critical

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

EPSS: 0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-31)
CWE: CWE-319
Published: 2024-11-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

References

https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01

Check your stack JSON