Security Advisory

CVE-2020-12048

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-06-29 13:48:04

Last updated 2024-08-04 11:48:57

Assigner icscert

State PUBLISHED

Description

Phoenix Hemodialysis Delivery System SW 3.36 and 3.40, The Phoenix Hemodialysis device does not support data-in-transit encryption (e.g., TLS/SSL) when transmitting treatment and prescription data on the network between the Phoenix system and the Exalis dialysis data management tool. An attacker with access to the network could observe sensitive treatment and prescription data sent between the Phoenix system and the Exalis tool.

← Browse all CVEs View on cve.org ↗