Baxter Connex Health Portal
view advisory published 2024-09-05
Successful exploitation of these vulnerabilities could lead to malicious code injection, shutdown of database service, or the ability to access, modify, or delete sensitive data from the database.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-6796US | critical9.1 | — | ||
In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized… | ||||
| CVE-2024-6795US | critical9.8 | — | ||
In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSMA-24-249-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-24-249-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationBaxter Connex Health Portal
Baxter is unaware of any exploitation of these vulnerabilities and/or the compromise of personal or health data. No user action is required.
- MitigationBaxter Connex Health Portal
Baxter is unaware of any exploitation of these vulnerabilities and/or the compromise of personal or health data. No user action is required.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan