CVE-2024-1275
Use of Default Cryptographic Key vulnerability in Baxter Welch Allyn Connex Spot Monitor may allow Configuration/Environment Manipulation.This issue affects Welch Allyn Connex Spot Monitor in all versions prior to 1.52.
Scoring
- Severity
- CRITICAL
- CVSS base score
- 9.1
- CVSS vector
- CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N
- EPSS probability
- 0.39%
- CWE
- CWE-1394
- Published
- 2024-05-31
- Last modified
- 2026-03-13
Affected products
- Baxter Welch Allyn Connex Spot Monitor
Weakness type
Related vulnerabilities
- CVE-2026-75870 — Punk versions before 0.18 for Perl allow session cookie forgery via an empty default HMAC key when a session is declared without a secret
- CVE-2026-54887 — DTLS server cookie bypass during startup window due to empty initial cookie secret
- CVE-2026-5039 — Predictable Default Cryptographic Key Used for DES Encryption in TP-Link TL-WL841N
- CVE-2026-20709 — Use of Default Cryptographic Key in the hardware for some Intel(R) Pentium(R) Processor Silver...
- CVE-2026-2215 — rachelos WeRSS we-mp-rss JWT auth.py default key
- CVE-2026-25815 — Fortinet FortiOS through 7.6.6 allows attackers to decrypt LDAP credentials stored in device...
- CVE-2025-41742 — Sprecher Automation: SPRECON-E series has a critical vulnerability due to the use of static cryptographic keys in system components
- CVE-2025-41744 — Sprecher Automation: SPRECON-E series has static default key material for TLS connections