Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2024-48970

Life2000 Ventilator microcontroller lacks memory protection

Description

The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Baxter Life2000 Ventilation System

Default version status: unaffected

  • 06.08.00.00 and prioraffected

References