deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2020-9625
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9627
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9628
Published: 2020-06-26
Description: Adobe DNG Software Development Kit (SDK) 1.5 and earlier versions have an out-of-bounds read vulnerability. Successful exploitation could lead to information disclosure.
CVSS Score: 7.5 (HIGH)
CWE: CWE-125
References: https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html; https://helpx.adobe.com/security/products/dng-sdk/apsb20-26.html
CVE: CVE-2020-9630
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a business logic error vulnerability. Successful exploitation could lead to privilege escalation.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9631
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-9632
Published: 2020-06-26
Description: Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a security mitigation bypass vulnerability. Successful exploitation could lead to arbitrary code execution.
CVSS Score: 9.8 (CRITICAL)
References: https://helpx.adobe.com/security/products/magento/apsb20-22.html; https://helpx.adobe.com/security/products/magento/apsb20-22.html
CVE: CVE-2020-4089
Published: 2020-06-26
Description: HCL Notes is vulnerable to an information leakage vulnerability through its support for the 'mailto' protocol. This vulnerability could result in files from the user's filesystem or connected network filesystems being leaked to a third party. All versions of HCL Notes 9, 10 and 11 are affected.
CVSS Score: 6.5 (MEDIUM)
References: https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080343; https://support.hcltechsw.com/csm?id=kb_article&sysparm_article=KB0080343
CVE: CVE-2020-15358
Published: 2020-06-27
Description: In SQLite before 3.32.3, select.c mishandles query-flattener optimization, leading to a multiSelectOrderBy heap overflow because of misuse of transitive properties for constant propagation.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-787
References: http://seclists.org/fulldisclosure/2020/Dec/32; http://seclists.org/fulldisclosure/2020/Nov/19; http://seclists.org/fulldisclosure/2020/Nov/20
CVE: CVE-2020-15360
Published: 2020-06-27
Description: com.docker.vmnetd in Docker Desktop 2.3.0.3 allows privilege escalation because of a lack of client verification.
CVSS Score: 7.8 (HIGH)
CWE: CWE-862
References: https://docs.docker.com/docker-for-windows/release-notes/; https://whitehatck01.blogspot.com/2020/06/dockers-latest-version-of-privilege.html; https://docs.docker.com/docker-for-windows/release-notes/
CVE: CVE-2020-15363
Published: 2020-06-28
Description: The Nexos theme through 1.7 for WordPress allows side-map/?search_order= SQL Injection.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: http://packetstormsecurity.com/files/158510/WordPress-NexosReal-Estate-Theme-1.7-Cross-Site-Scripting-SQL-Injection.html; https://github.com/vladvector/vladvector.github.io/blob/master/exploit/2020-06-17-nexos-real-estate-wordpress-theme-v1-7.txt; https://themeforest.net/item/nexos-real-estate-agency-directory/21126242
CVE: CVE-2020-15364
Published: 2020-06-28
Description: The Nexos theme through 1.7 for WordPress allows top-map/?search_location= reflected XSS.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: http://packetstormsecurity.com/files/158510/WordPress-NexosReal-Estate-Theme-1.7-Cross-Site-Scripting-SQL-Injection.html; https://github.com/vladvector/vladvector.github.io/blob/master/exploit/2020-06-17-nexos-real-estate-wordpress-theme-v1-7.txt; https://themeforest.net/item/nexos-real-estate-agency-directory/21126242
CVE: CVE-2020-15365
Published: 2020-06-28
Description: LibRaw before 0.20-Beta3 has an out-of-bounds write in parse_exif() in metadata\exif_gps.cpp via an unrecognized AtomName and a zero value of tiff_nifds.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-787
References: https://github.com/LibRaw/LibRaw/compare/0.20-Beta2...0.20-Beta3; https://github.com/LibRaw/LibRaw/issues/301; https://github.com/LibRaw/LibRaw/compare/0.20-Beta2...0.20-Beta3
CVE: CVE-2019-20410
Published: 2020-06-29
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to view sensitive information via an Information Disclosure vulnerability in the comment restriction feature. The affected versions are before version 7.6.17, from version 7.7.0 before 7.13.9, and from version 8.0.0 before 8.4.2.
CVSS Score: 6.5 (MEDIUM)
References: https://jira.atlassian.com/browse/JRASERVER-70884; https://jira.atlassian.com/browse/JRASERVER-70884
CVE: CVE-2019-20411
Published: 2020-06-29
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to modify Wallboard settings via a Cross-site request forgery (CSRF) vulnerability. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-352
References: https://jira.atlassian.com/browse/JRASERVER-70881; https://jira.atlassian.com/browse/JRASERVER-70881
CVE: CVE-2019-20412
Published: 2020-06-29
Description: The Convert Sub-Task to Issue page in affected versions of Atlassian Jira Server and Data Center allow remote attackers to enumerate the following information via an Improper Authentication vulnerability: Workflow names; Project Key, if it is part of the workflow name; Issue Keys; Issue Types; Status Types. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-287
References: https://jira.atlassian.com/browse/JRASERVER-70882; https://jira.atlassian.com/browse/JRASERVER-70882
CVE: CVE-2019-20413
Published: 2020-06-29
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to impact the application's availability via a Denial of Service (DoS) vulnerability on the UserPickerBrowser.jspa page. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2.
CVSS Score: 7.5 (HIGH)
References: https://jira.atlassian.com/browse/JRASERVER-70883; https://jira.atlassian.com/browse/JRASERVER-70883
CVE: CVE-2019-20414
Published: 2020-06-29
Description: Affected versions of Atlassian Jira Server and Data Center allow remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in Issue Navigator Basic Search. The affected versions are before version 7.13.9, and from version 8.0.0 before 8.4.2.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://jira.atlassian.com/browse/JRASERVER-70885; https://jira.atlassian.com/browse/JRASERVER-70885
CVE: CVE-2020-8024
Published: 2020-06-29
Description: A Incorrect Default Permissions vulnerability in the packaging of hylafax+ of openSUSE Leap 15.2, openSUSE Leap 15.1, openSUSE Factory allows local attackers to escalate from user uucp to users calling hylafax binaries. This issue affects: openSUSE Leap 15.2 hylafax+ versions prior to 7.0.2-lp152.2.1. openSUSE Leap 15.1 hylafax+ version 5.6.1-lp151.3.7 and prior versions. openSUSE Factory hylafax+ versions prior to 7.0.2-2.1.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-276, CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00022.html; https://bugzilla.suse.com/show_bug.cgi?id=1172731; http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00022.html
CVE: CVE-2020-8022
Published: 2020-06-29
Description: A Incorrect Default Permissions vulnerability in the packaging of tomcat on SUSE Enterprise Storage 5, SUSE Linux Enterprise Server 12-SP2-BCL, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Linux Enterprise Server 12-SP3-BCL, SUSE Linux Enterprise Server 12-SP3-LTSS, SUSE Linux Enterprise Server 12-SP4, SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server for SAP 12-SP3, SUSE Linux Enterprise Server for SAP 15, SUSE OpenStack Cloud 7, SUSE OpenStack Cloud 8, SUSE OpenStack Cloud Crowbar 8 allows local attackers to escalate from group tomcat to root. This issue affects: SUSE Enterprise Storage 5 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP2-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-BCL tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP3-LTSS tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server 12-SP4 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 12-SP5 tomcat versions prior to 9.0.35-3.39.1. SUSE Linux Enterprise Server 15-LTSS tomcat versions prior to 9.0.35-3.57.3. SUSE Linux Enterprise Server for SAP 12-SP2 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 12-SP3 tomcat versions prior to 8.0.53-29.32.1. SUSE Linux Enterprise Server for SAP 15 tomcat versions prior to 9.0.35-3.57.3. SUSE OpenStack Cloud 7 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud 8 tomcat versions prior to 8.0.53-29.32.1. SUSE OpenStack Cloud Crowbar 8 tomcat versions prior to 8.0.53-29.32.1.
CVSS Score: 7.7 (HIGH)
CWE: CWE-276, CWE-276
References: http://lists.opensuse.org/opensuse-security-announce/2020-06/msg00066.html; https://bugzilla.suse.com/show_bug.cgi?id=1172405; https://lists.apache.org/thread.html/r393d4f431683e99c839b4aed68f720b8583bca6c35cd84adccaa02be%40%3Cjava-dev.axis.apache.org%3E
CVE: CVE-2019-3681
Published: 2020-06-29
Description: A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 .
CVSS Score: 7.5 (HIGH)
CWE: CWE-73
References: https://bugzilla.suse.com/show_bug.cgi?id=1122675; https://bugzilla.suse.com/show_bug.cgi?id=1122675
CVE: CVE-2020-8014
Published: 2020-06-29
Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of kopano-spamd of openSUSE Leap 15.1, openSUSE Tumbleweed allowed local attackers with the privileges of the kopano user to escalate to root. This issue affects: openSUSE Leap 15.1 kopano-spamd versions prior to 10.0.5-lp151.4.1. openSUSE Tumbleweed kopano-spamd versions prior to 10.0.5-1.1.
CVSS Score: 7.7 (HIGH)
CWE: CWE-61
References: https://bugzilla.suse.com/show_bug.cgi?id=1164131; https://bugzilla.suse.com/show_bug.cgi?id=1164131
CVE: CVE-2020-8019
Published: 2020-06-29
Description: A UNIX Symbolic Link (Symlink) Following vulnerability in the packaging of syslog-ng of SUSE Linux Enterprise Debuginfo 11-SP3, SUSE Linux Enterprise Debuginfo 11-SP4, SUSE Linux Enterprise Module for Legacy Software 12, SUSE Linux Enterprise Point of Sale 11-SP3, SUSE Linux Enterprise Server 11-SP4-LTSS, SUSE Linux Enterprise Server for SAP 12-SP1; openSUSE Backports SLE-15-SP1, openSUSE Leap 15.1 allowed local attackers controlling the user news to escalate their privileges to root. This issue affects: SUSE Linux Enterprise Debuginfo 11-SP3 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Debuginfo 11-SP4 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Module for Legacy Software 12 syslog-ng versions prior to 3.6.4-12.8.1. SUSE Linux Enterprise Point of Sale 11-SP3 syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Server 11-SP4-LTSS syslog-ng versions prior to 2.0.9-27.34.40.5.1. SUSE Linux Enterprise Server for SAP 12-SP1 syslog-ng versions prior to 3.6.4-12.8.1. openSUSE Backports SLE-15-SP1 syslog-ng versions prior to 3.19.1-bp151.4.6.1. openSUSE Leap 15.1 syslog-ng versions prior to 3.19.1-lp151.3.6.1.
CVSS Score: 7.7 (HIGH)
CWE: CWE-61
References: https://bugzilla.suse.com/show_bug.cgi?id=1169385; https://bugzilla.suse.com/show_bug.cgi?id=1169385
CVE: CVE-2019-18246
Published: 2020-06-29
Description: BIOTRONIK CardioMessenger II, The affected products do not properly enforce mutual authentication with the BIOTRONIK Remote Communication infrastructure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-05; https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE: CVE-2019-18248
Published: 2020-06-29
Description: BIOTRONIK CardioMessenger II, The affected products transmit credentials in clear-text prior to switching to an encrypted communication channel. An attacker can disclose the product’s client credentials for connecting to the BIOTRONIK Remote Communication infrastructure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-319, CWE-319
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-05; https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE: CVE-2019-18252
Published: 2020-06-29
Description: BIOTRONIK CardioMessenger II, The affected products allow credential reuse for multiple authentication purposes. An attacker with adjacent access to the CardioMessenger can disclose its credentials used for connecting to the BIOTRONIK Remote Communication infrastructure.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-287, CWE-287
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-05; https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE: CVE-2019-18254
Published: 2020-06-29
Description: BIOTRONIK CardioMessenger II, The affected products do not encrypt sensitive information while at rest. An attacker with physical access to the CardioMessenger can disclose medical measurement data and the serial number from the implanted cardiac device the CardioMessenger is paired with.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-311, CWE-312
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-05; https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE: CVE-2019-18256
Published: 2020-06-29
Description: BIOTRONIK CardioMessenger II, The affected products use individual per-device credentials that are stored in a recoverable format. An attacker with physical access to the CardioMessenger can use these credentials for network authentication and decryption of local data in transit.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-257, CWE-522
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-05; https://www.us-cert.gov/ics/advisories/icsma-20-170-05
CVE: CVE-2019-19160
Published: 2020-06-29
Description: Reportexpress ProPlus contains a vulnerability that could allow an arbitrary code execution by inserted VBscript into the configure file(rxp).
CVSS Score: 5.7 (MEDIUM)
CWE: CWE-353, CWE-345
References: http://www.cabsoftware.com:8080/HomePage2015A/html/; https://www.boho.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=35474; http://www.cabsoftware.com:8080/HomePage2015A/html/
CVE: CVE-2020-12008
Published: 2020-06-29
Description: Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems use cleartext messages to communicate order information with an order entry system. This could allow an attacker with network access to view sensitive data including PHI.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-01; https://www.us-cert.gov/ics/advisories/icsma-20-170-01
CVE: CVE-2020-12012
Published: 2020-06-29
Description: Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13, and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 have hard-coded administrative account credentials for the ExactaMix application. Successful exploitation of this vulnerability may allow an attacker with physical access to gain unauthorized access to view/update system configuration or data. This could impact confidentiality and integrity of the system and risk exposure of sensitive information including PHI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-259, CWE-798
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-01; https://www.us-cert.gov/ics/advisories/icsma-20-170-01
CVE: CVE-2020-12016
Published: 2020-06-29
Description: Baxter ExactaMix EM 2400 & EM 1200, Versions ExactaMix EM2400 Versions 1.10, 1.11, 1.13, 1.14, ExactaMix EM1200 Versions 1.1, 1.2, 1.4, 1.5, Baxter ExactaMix EM 2400 Versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 have hard-coded administrative account credentials for the ExactaMix operating system. Successful exploitation of this vulnerability may allow an attacker who has gained unauthorized access to system resources, including access to execute software or to view/update files, directories, or system configuration. This could allow an attacker with network access to view sensitive data including PHI.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-259, CWE-798
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-01; https://www.us-cert.gov/ics/advisories/icsma-20-170-01
CVE: CVE-2020-12020
Published: 2020-06-29
Description: Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 does not restrict non administrative users from gaining access to the operating system and editing the application startup script. Successful exploitation of this vulnerability may allow an attacker to alter the startup script as the limited-access user.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-668, CWE-668
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-01; https://www.us-cert.gov/ics/advisories/icsma-20-170-01
CVE: CVE-2020-12024
Published: 2020-06-29
Description: Baxter ExactaMix EM 2400 versions 1.10, 1.11, 1.13, 1.14 and ExactaMix EM1200 Versions 1.1, 1.2, 1.4 and 1.5 does not restrict access to the USB interface from an unauthorized user with physical access. Successful exploitation of this vulnerability may allow an attacker with physical access to the system the ability to load an unauthorized payload or unauthorized access to the hard drive by booting a live USB OS. This could impact confidentiality and integrity of the system and risk exposure of sensitive information including PHI.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-284
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-01; https://www.us-cert.gov/ics/advisories/icsma-20-170-01
CVE: CVE-2020-12032
Published: 2020-06-29
Description: Baxter ExactaMix EM 2400 Versions 1.10, 1.11 and ExactaMix EM1200 Versions 1.1, 1.2 systems store device data with sensitive information in an unencrypted database. This could allow an attacker with network access to view or modify sensitive data including PHI.
CVSS Score: 9.1 (CRITICAL)
CWE: CWE-311, CWE-312
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-01; https://www.us-cert.gov/ics/advisories/icsma-20-170-01
CVE: CVE-2020-12035
Published: 2020-06-29
Description: Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings and calibration.
CVSS Score: 4.9 (MEDIUM)
CWE: CWE-287, CWE-798
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-01; https://us-cert.cisa.gov/ics/advisories/icsma-20-170-02; https://www.us-cert.gov/ics/advisories/icsma-20-170-01
CVE: CVE-2020-12036
Published: 2020-06-29
Description: Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-319, CWE-319
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-01; https://www.us-cert.gov/ics/advisories/icsma-20-170-01
CVE: CVE-2020-12037
Published: 2020-06-29
Description: Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.
CVSS Score: 7.5 (HIGH)
CWE: CWE-259, CWE-319
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-01; https://us-cert.cisa.gov/ics/advisories/icsma-20-170-02; https://www.us-cert.gov/ics/advisories/icsma-20-170-01
CVE: CVE-2020-12039
Published: 2020-06-29
Description: Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration values, network configuration of Sigma Spectrum WBM if installed.
CVSS Score: 2.4 (LOW)
CWE: CWE-259, CWE-798
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-04; https://www.us-cert.gov/ics/advisories/icsma-20-170-04
CVE: CVE-2020-12040
Published: 2020-06-29
Description: Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has circumvented network security measures to view sensitive non-private data or to perform a man-in-the-middle attack.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-319, CWE-319
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-04; https://www.us-cert.gov/ics/advisories/icsma-20-170-04
CVE: CVE-2020-12041
Published: 2020-06-29
Description: The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configuration changes to network settings of the WBM, and allows the WBM to be rebooted. Temporary configuration changes to network settings are removed upon reboot.
CVSS Score: 9.4 (CRITICAL)
CWE: CWE-732, CWE-732
References: https://www.us-cert.gov/ics/advisories/icsma-20-170-04; https://www.us-cert.gov/ics/advisories/icsma-20-170-04