Baxter ExactaMix (Update A)

2020-06-23 14:20:40 UTC

This updated advisory is a follow-up to the original advisory titled ICSA-20-170-01 Baxter ExactaMix that was published June 18, 2020, to the ICS webpage on us-cert.gov. This advisory contains mitigations for  Use of Hard-coded Password, Cleartext Transmission of Sensitive Data, Missing Encryption of Sensitive Data, Improper Access Control, Exposure of Resource to Wrong Sphere and Improper Input Validation vulnerabilities in Baxter's ExactaMix automated pumping system.