description: Baxter PrismaFlex all versions, PrisMax all versions prior to 3.x, The PrismaFlex device contains a hard-coded service password that provides access to biomedical information, device settings, calibration settings, and network configuration. This could allow an attacker to modify device settings and calibration.
problem types: IMPROPER AUTHENTICATION CWE-287
affected:
{
product: Baxter PrismaFlex and PrisMax
vendor: n/a
versions:
status: affected, version: PrismaFlex all versions, PrisMax all versions prior to 3.x
}