CVE-2020-12048

State: Published
Severity: Not scored
Published: Jun 29, 2020
Updated: Aug 4, 2024
Reserved: Apr 21, 2020

Description

Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption (e.g., TLS/SSL) when transmitting treatment and prescription data on the network between the Phoenix system and the Exalis dialysis data management tool. An attacker with access to the network could observe sensitive treatment and prescription data sent between the Phoenix system and the Exalis tool.

Scores

The record has no CVSS score.

Weaknesses

CWE-319 CLEARTEXT TRANSMISSION OF SENSITIVE DATA CWE-319

Affected Products

Product	Versions
Baxter Phoenix Hemodialysis Delivery Systemn/a	Phoenix Hemodialysis Delivery System SW 3.36 and 3.40Affected

References

https://www.us-cert.gov/ics/advisories/icsma-20-170-03

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.