Baxter — Vulnerabilities & Security Advisories 20

Baxter International operates as a global medical technology company, primarily manufacturing infusion pumps, anesthesia delivery systems, and patient monitoring devices for clinical environments. Security audits have identified twenty Common Vulnerabilities and Exposures (CVEs) associated with its product ecosystem, predominantly affecting networked infusion pumps and hospital information systems. The most prevalent vulnerability classes include remote code execution (RCE) and cross-site scripting (XSS), often stemming from inadequate input validation in web-based administrative interfaces. Additionally, several instances of privilege escalation have been documented, allowing unauthorized users to gain administrative control over device configurations. Notable incidents involve the exploitation of unpatched firmware in older pump models, which enabled attackers to manipulate drug delivery rates or disable safety alarms. These flaws highlight significant risks to patient safety and data integrity, underscoring the critical need for rigorous security patching and network segmentation in healthcare infrastructure.