What is the Baxter CNA?

Baxter is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 18 CVE records since 2022.

How many CVEs has Baxter published?

Baxter has published 18 CVE records, including 14 in the last two years.

What is Baxter's CVE data quality grade?

RadicalNotion.AI grades Baxter's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.

What products does Baxter publish CVEs for?

Baxter most frequently publishes CVEs for Life2000 Ventilation System, life2000_ventilator_firmware, sigma spectrum 35700bax2, baxter spectrum iq 35700bax3, Baxter Spectrum Wireless Battery Module (WBM).

Which vendors does Baxter cover?

Baxter publishes CVEs across 3 distinct vendors, most often Baxter, hillrom, Welch Allyn.

Is Baxter actively publishing CVEs?

Baxter is currently active, based on 14 CVEs in the last two years.

What is the average severity of Baxter's CVEs?

The average CVSS base score across Baxter's scored CVEs is 8.0.

How many critical CVEs has Baxter published?

Baxter has published 12 critical-severity CVEs and 2 high-severity CVEs.

What are the most common weakness types in Baxter's CVEs?

Baxter's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-134 (Use of Externally-Controlled Format String), CWE-284 (Improper Access Control), CWE-259 (Use of Hard-coded Password).

How does Baxter rank among CNAs?

By total CVE volume, Baxter ranks #254 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.

Grade A

Active

Baxter

Name: Baxter CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published February 7, 2025

CVEs published

Total assigned

2.4

Years active

2022–2025

8.0

Avg CVSS

Across scored CVEs

Recent CVEs

Last 2 years

Overview

Baxter is a CVE Numbering Authority that has published 18 CVE records since 2022. It is currently classified as active, with 14 CVEs published in the last two years. Its CVE data quality is graded A (100% overall completeness).

Among the 370 CNAs tracked here, Baxter ranks #254 by CVE volume and reports more complete records than 60% of all CNAs.

Data quality report card

How complete and consistent Baxter's CVE records are, scored across vendor, product, CVSS, and CWE coverage.

A CVE record only requires a description to be published. “Completeness” measures how often Baxter also fills in the optional — but extremely useful — fields that make a vulnerability actually actionable: the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means more of this CNA’s CVEs include those details, so defenders spend less time enriching records by hand.

Report card grade

100%

Overall score

Overall completeness100%

Vendor completeness100%

Product completeness100%

CVSS completeness100%

CWE completeness100%

100%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

316 chars

Avg description length

Per CVE record

2022-09-09

First CVE date

Earliest assignment

2025-02-07

Latest CVE date

Most recent assignment

8.0

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of Baxter's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical12

High2

Medium4

Low0

In CISA’s Known Exploited Vulnerabilities catalog

None of Baxter's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories Baxter most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs Baxter has published each year.

2022

2024

2025

Top vendors

The vendors Baxter publishes the most CVEs for.

Baxter17 CVEs
hillrom2 CVEs
Welch Allyn2 CVEs

Latest CVEs

The most recent CVEs assigned by Baxter.

CVE-2022-26389CWE-284
High · CVSS 7.7
EPSS 0.3%2025-02-07
CVE-2022-26388CWE-259
Medium · CVSS 6.4
EPSS 0.3%2025-02-07
CVE-2024-48967CWE-778
Critical · CVSS 10.0
EPSS 0.6%2024-11-14
CVE-2024-48966CWE-306
Critical · CVSS 10.0
EPSS 0.7%2024-11-14
CVE-2024-48970CWE-1191
Critical · CVSS 9.3
EPSS 0.2%2024-11-14
CVE-2024-48974CWE-494
Life2000 Ventilator does not perform proper file integrity checks when adopting firmware updates
Critical · CVSS 9.3
EPSS 0.2%2024-11-14
CVE-2024-48973CWE-1263
Critical · CVSS 9.3
EPSS 0.2%2024-11-14
CVE-2024-48971CWE-798
Clinician Password and Serial Number Clinician Password are hard-coded in Life2000 Ventilator
Critical · CVSS 9.3
EPSS 0.2%2024-11-14
CVE-2024-9832CWE-307
No limit on failed login attempts with Clinician Password or Serial Number Clinician Password on Life2000 Ventilator
Critical · CVSS 9.3
EPSS 0.2%2024-11-14
CVE-2024-9834CWE-319
Improper data protection on Life2000 ventilator serial interface
Critical · CVSS 9.3
EPSS 0.1%2024-11-14
CVE-2024-6796CWE-284
Critical · CVSS 9.1
EPSS 0.4%2024-09-09
CVE-2024-6795CWE-89
Critical · CVSS 10.0
EPSS 0.6%2024-09-09

Track new Baxter CVEs as they are published and get AI-written analysis and remediation guidance.

Monitor Baxter CVEs

Other CNAs

Compare data quality across other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the Baxter CNA.

What is the Baxter CNA?: Baxter is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 18 CVE records since 2022.
How many CVEs has Baxter published?: Baxter has published 18 CVE records, including 14 in the last two years.
What is Baxter's CVE data quality grade?: RadicalNotion.AI grades Baxter's CVE data quality as A, with an overall completeness score of 100%. This reflects how consistently its CVE records include vendor (100%), product (100%), CVSS (100%), and CWE (100%) information.
What products does Baxter publish CVEs for?: Baxter most frequently publishes CVEs for Life2000 Ventilation System, life2000_ventilator_firmware, sigma spectrum 35700bax2, baxter spectrum iq 35700bax3, Baxter Spectrum Wireless Battery Module (WBM).
Which vendors does Baxter cover?: Baxter publishes CVEs across 3 distinct vendors, most often Baxter, hillrom, Welch Allyn.
Is Baxter actively publishing CVEs?: Baxter is currently active, based on 14 CVEs in the last two years.
What is the average severity of Baxter's CVEs?: The average CVSS base score across Baxter's scored CVEs is 8.0.
How many critical CVEs has Baxter published?: Baxter has published 12 critical-severity CVEs and 2 high-severity CVEs.
Are any of Baxter's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of Baxter's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in Baxter's CVEs?: Baxter's CVEs most often map to these CWE weakness types: CWE-306 (Missing Authentication for Critical Function), CWE-134 (Use of Externally-Controlled Format String), CWE-284 (Improper Access Control), CWE-259 (Use of Hard-coded Password).
How does Baxter rank among CNAs?: By total CVE volume, Baxter ranks #254 of 370 CNAs, and it reports more complete CVE records than 60% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track Baxter CVEs

Monitor new vulnerabilities as this CNA publishes them, with AI-written analysis and remediation guidance.

Start free See pricing