CVE-2020-12032

Name of the Vulnerable Software and Affected Versions Baxter ExactaMix EM 2400 versions 1.10 through 1.11 Baxter ExactaMix EM1200 versions 1.1 through 1.2

Description The systems store device data with sensitive information in an unencrypted database. This could allow an attacker with network access to view or modify sensitive data including Protected Health Information (PHI).

Recommendations For Baxter ExactaMix EM 2400 versions 1.10 through 1.11, update the system to encrypt the database. For Baxter ExactaMix EM1200 versions 1.1 through 1.2, update the system to encrypt the database.