Baxter Connex Health Portal
Advisory ansehen veröffentlicht 2024-09-05
Successful exploitation of these vulnerabilities could lead to malicious code injection, shutdown of database service, or the ability to access, modify, or delete sensitive data from the database.
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-6796US | critical9.1 | — | ||
In Baxter Connex health portal released before 8/30/2024, an improper access control vulnerability has been found that could allow an unauthenticated attacker to gain unauthorized… | ||||
| CVE-2024-6795US | critical9.8 | — | ||
In Connex health portal released before8/30/2024, SQL injection vulnerabilities were found that could have allowed an unauthenticated attacker to gain unauthorized access to Connex… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSMA-24-249-01 JSONself
- Recommended Practicesexternal
- ICSA Advisory ICSMA-24-249-01 - Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (2)
- MitigationBaxter Connex Health Portal
Baxter is unaware of any exploitation of these vulnerabilities and/or the compromise of personal or health data. No user action is required.
- MitigationBaxter Connex Health Portal
Baxter is unaware of any exploitation of these vulnerabilities and/or the compromise of personal or health data. No user action is required.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan