CVE-2024-48973: critical vulnerability in Baxter Life2000 Ventilation System
Debug port on Life2000 Ventilator serial interface is enabled by default
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
A ventilator device leaves a debug port enabled by default on its serial interface, allowing anyone with physical access to send unencrypted commands that can read sensitive information or change critical device settings.
The Life2000 Ventilator exposes an unauthenticated debug serial port without encryption, enabling local attackers to send arbitrary messages that lead to information disclosure and unauthorized modification of device configuration and operational parameters. Exploitation requires physical or logical access to the serial interface.
In the same product, most dangerous first.