What’s Vulnerable › Vulnerabilities

CVE-2024-1275: Vulnerability in Baxter Welch Allyn Connex Spot Monitor

• Severity: critical (CVSS 9.1 v4.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-05-31 · updated 2026-06-17
• Weakness: CWE-1394

Description

Use of Default Cryptographic Key vulnerability in Baxter Welch Allyn Connex Spot Monitor may allow Configuration/Environment Manipulation.This issue affects Welch Allyn Connex Spot Monitor in all versions prior to 1.52.

Affected products

• Baxter Welch Allyn Connex Spot Monitor: through 1.52

References

• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-151-02
• https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-151-02

Get alerted when CVE-2024-1275 or the next vulnerability affects your stack