CVE-2024-48974 | BDVDB-2026-255185 Detail
BaxterLife2000 Ventilation System
Description#
The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure.
Impact#
CAPEC-186 Malicious Software Update
Weaknesses#
- CWE-494 Download of Code Without Integrity Check
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.