CVE-2024-48970 | BDVDB-2026-255182 Detail
BaxterLife2000 Ventilation System
Description#
The ventilator's microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure.
Impact#
CAPEC-117 Interception
Weaknesses#
- CWE-1191 On-Chip Debug and Test Interface with Improper Access Control
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.