by Kastro
Paper/Archive/CVE-2024-1275

CVE-2024-1275

Baxter Welch Allyn Connex Spot Monitor — Vulnerability in Baxter Welch Allyn Connex Spot Monitor

EPSS 0.4%CVSS 9.1
critical.is priorityof 100
34
CVSS 9.1 (CNA)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 33.3.333 × 206.7No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

Use of Default Cryptographic Key vulnerability in Baxter Welch Allyn Connex Spot Monitor may allow Configuration/Environment Manipulation.This issue affects Welch Allyn Connex Spot Monitor in all versions prior to 1.52.

Affected

ProductAffectedFixed inSource
Welch Allyn Connex Spot Monitor≤ 1.52–CNA
welch_allyn_connex_spot_monitor≤ 1.52–CISA-ADP

Scores by source

Baxter (CNA)9.1CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refcisa.gov/news-events/ics-medical-advisories/icsma-24-151-02