CVE-2024-48967 Life2000 ventilator and Service PC lack sufficient audit logging capabilities
Insufficient audit logging in Life2000 ventilators allows attackers to make unauthorized changes and access data without detection.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-48967?
CVE-2024-48967 is a critical vulnerability in Baxter Life2000 Ventilation System, published on 14 Nov 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance.
Weakness: CWE-778
Which versions are affected by CVE-2024-48967?
How do I fix CVE-2024-48967?
No fix has been published for CVE-2024-48967 yet. Limit exposure of the affected software until one is available.
Is CVE-2024-48967 being exploited?
There is no known exploitation of CVE-2024-48967 in the wild and no public exploit code.
Sources
Also known as GHSA-9mp2-83wh-h47x.