PatchSiren

PatchSiren cyber security CVE debrief

CVE-2024-6796 Baxter CVE debrief

A vulnerability in the Baxter Connex Health Portal could potentially allow an unauthorized user to gain access to patient and clinician information, and to modify or delete clinic details. The vulnerability has been assigned a CVSS 3.1 score of 8.2 (HIGH). According to the CISA advisory, Baxter patched these vulnerabilities promptly after discovery on August 30, 2024, and no additional user action is required. Baxter has stated they are unaware of any exploitation of these vulnerabilities or compromise of personal or health data.

Vendor
Baxter
Product
Connex Health Portal
CVSS
HIGH 8.2
CISA KEV
Not listed in stored evidence
Original CVE published
2024-09-05
Original CVE updated
2024-09-05
Advisory published
2024-09-05
Advisory updated
2024-09-05

Who should care

Healthcare organizations using Baxter Connex Health Portal for patient and clinic management; medical device security teams; HIPAA compliance officers; healthcare CISOs responsible for medical device cybersecurity

Technical summary

The Baxter Connex Health Portal contains a vulnerability that could allow an unauthorized attacker to access sensitive patient and clinician information, as well as modify or delete clinic details. The vulnerability is rated CVSS 3.1 8.2 (HIGH) with network attack vector, low complexity, and no required privileges or user interaction. The confidentiality impact is rated LOW while integrity impact is HIGH, with no availability impact. Baxter patched this vulnerability on August 30, 2024, and reports no known exploitation or data compromise.

Defensive priority

HIGH

Recommended defensive actions

  • Verify that Baxter Connex Health Portal instances are running the August 30, 2024 patch or later
  • Review access logs for unauthorized access to patient or clinician information
  • Review audit logs for unauthorized modifications or deletions of clinic details
  • Apply network segmentation for medical device management systems per ICS-CERT recommended practices
  • Monitor for anomalous network traffic to Connex Health Portal endpoints

Evidence notes

CISA published advisory ICSMA-24-249-01 on September 5, 2024, documenting this vulnerability in the Baxter Connex Health Portal. The affected product is Baxter Connex Health Portal versions prior to August 30, 2024. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, with low confidentiality impact and high integrity impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2024-6796 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2024-6796

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2024-6796 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2024-6796

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • Source item URL

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/cisagov/CSAF/develop/csaf_files/OT/white/2024/icsma-24-249-01.json

    cisa_csaf

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/news-events/ics-medical-advisories/icsma-24-249-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/resources-tools/resources/ics-recommended-practices

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/topics/industrial-control-systems

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf

    Reference

  • Source reference

    Unverified legacy reference

    URL: https://www.cisa.gov/uscert/ncas/tips/ST04-014

    Reference

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.