CVE-2024-48970

Publication date

2024-11-14 21:31:14

Family

Baxter

State

PUBLISHED

Description

The ventilators microcontroller lacks memory protection. An attacker could connect to the internal JTAG interface and read or write to flash memory using an off-the-shelf debugging tool, which could disrupt the function of the device and/or cause unauthorized information disclosure.