# CVE-2024-48967

## Summary

- **CVE ID:** CVE-2024-48967
- **Severity:** CRITICAL
- **CVSS Score:** 10 (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
- **CWE:** CWE-778
- **Published:** Nov 14, 2024
- **Last Modified:** Mar 13, 2026

## Description

The ventilator and the Service PC lack sufficient audit logging capabilities to allow for detection of malicious activity and subsequent forensic examination. An attacker with access to the ventilator and/or the Service PC could, without detection, make unauthorized changes to ventilator settings that result in unauthorized disclosure of information and/or have unintended impacts on device performance.

## Affected Products

- Baxter — Life2000 Ventilation System (06.08.00.00 and prior)

## References

- [CNA](https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-319-01)

## Exploitation Prediction (EPSS)

- **EPSS Score:** 0.63%
- **EPSS Percentile:** 48.1

---
_Exported from OnDuty AI Vulnerability Intelligence on 2026-09-11._