CVE-2024-48970criticalCWE-1191

CVE-2024-48970: critical vulnerability in Baxter Life2000 Ventilation System

Life2000 Ventilator microcontroller lacks memory protection

Published · Updated

28Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 9.3epss 0.2%
exploitation probability
0.2%top 89% of all CVEs
observed exploitation
nono source reports it
In short

A Life2000 ventilator's microcontroller has no memory protection, allowing someone with physical access to connect a debugging tool to its internal JTAG port and read or modify its memory, potentially disrupting the device or stealing sensitive data.

Technical detail

The microcontroller lacks memory protection mechanisms, enabling direct memory access via the exposed JTAG interface using standard debugging tools. An attacker with physical access can read/write flash memory, compromising device integrity and confidentiality. This may lead to unauthorized firmware modification or extraction of protected information.

Summary generated and translated by AI from the official description.
The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Baxter · Life2000 Ventilation System
Related CVEs — Baxter Life2000 Ventilation System

In the same product, most dangerous first.

CVE-2024-48966CRITICALLife2000 service tools for test and calibration do not support user authenticationEPSS 0.7%CVE-2024-48967CRITICALLife2000 ventilator and Service PC lack sufficient audit logging capabilitiesEPSS 0.6%CVE-2024-48973CRITICALDebug port on Life2000 Ventilator serial interface is enabled by defaultEPSS 0.2%CVE-2024-48971CRITICALClinician Password and Serial Number Clinician Password are hard-coded in Life2000 VentilatorEPSS 0.2%CVE-2024-9832CRITICALNo limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 VentilatorEPSS 0.2%CVE-2024-48974CRITICALLife2000 Ventilator does not perform proper file integrity checks when adopting firmware updatesEPSS 0.2%
References
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01