https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T01:59:06.880284+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2020-52563 cnvd-2020-52563 2026-10-05T01:59:06.885092+00:00 cnvd-2020-52563 https://cve.radiocsirt.org/vuln/euvd-2026-41055 EUVD-2026-41055 2026-10-05T01:59:06.885127+00:00 EUVD-2026-41055 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12036 fkie_cve-2020-12036 2026-10-05T01:59:06.885141+00:00

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.

 https://cve.radiocsirt.org/vuln/ghsa-cx3p-ghw7-pr4c GHSA-cx3p-ghw7-pr4c 2026-10-05T01:59:06.885171+00:00

Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.

 https://cve.radiocsirt.org/vuln/gsd-2020-12036 gsd-2020-12036 2026-10-05T01:59:06.885187+00:00 gsd-2020-12036 https://cve.radiocsirt.org/vuln/icsma-20-170-02 ICSMA-20-170-02 — Baxter PrismaFlex and PrisMax (Update B) 2026-10-05T01:59:06.885198+00:00

The affected devices do not implement data-in-transit encryption (e.g., TLS/SSL) when configured to send treatment data to a PDMS (Patient Data Management System) or an EMR (Electronic Medical Record) system. An attacker could observe sensitive data sent from the device.CVE-2020-12036 has been assigned to this vulnerability. A CVSS v3 base score of 6.5 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N). The affected devices do not require authentication when configured to send treatment data to a PDMS or an EMR system. This could allow an attacker to modify treatment status information.CVE-2020-12035 has been assigned to this vulnerability. A CVSS v3 base score of 7.6 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L). The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings and calibration.CVE-2020-12037 has been assigned to this vulnerability. A CVSS v3 base score of 5.4 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L).