Hamilton Medical T1 ventilator through 2.2.3 has hard-coded admin credentials
CISA advisory ICSMA-21-047-01 reports hard-coded credentials (CVE-2020-27278), missing XML validation (CVE-2020-27282) and log information disclosure (CVE-2020-27290) in Hamilton Medical T1 Ventilator Version 2.2.3 and prior. Hamilton recommends updating to a later version.