CVE-2024-48974
Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates
The ventilator does not perform proper file integrity checks when adopting firmware updates. This makes it possible for an attacker to force unauthorized changes to the device's configuration settings and/or compromise device functionality by pushing a compromised/illegitimate firmware file. This could disrupt the function of the device and/or cause unauthorized information disclosure.
Reserved 2024-10-10 | Published 2024-11-14 | Updated 2024-11-18 | Assigner BaxterCWE-494 Download of Code Without Integrity Check
www.cisa.gov/...vents/ics-medical-advisories/icsma-24-319-01
Support options
