Baxter Prismax Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Baxter Prismax Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2020-12036 — CVSS 7.5 (high): Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g…
• CVE-2020-12037 — CVSS 7.5 (high): Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The affected devices do not implement data-in-transit encryption (e.g…
• CVE-2020-12035 — CVSS 4.9 (medium): Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that…