Vulnerability

Baxter warns of a Newmar radio PIM file flaw in Connex vital signs monitors

MedDevice Cyber Staff · Feb 18 · 3 min read · Via Baxter Newmar radio bulletin 80031885 Rev. A

Baxter published customer bulletin 80031885 Rev. A on February 18, 2026, covering devices with the Newmar radio: the Connex Vital Signs Monitor (CVSM) 68 Series and Connex Integrated Wall System (CIWS) 85 Series manufactured after June 27, 2018, and the Connex Spot Monitor (CSM) 75 Series.

The flaw sits in the handling of PIM files used for Newmar radio software updates and client certificate installation. Baxter says it could lead to unauthorized access to customer network information, radio setting reconfiguration and loss of clinical data connectivity.

Baxter is developing a new software package to mitigate the risk. Files that carry radio updates and network certificates deserve the same integrity checks as firmware, and this one evidently did not get them.

Are you a representative of Baxter? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

No fix ships yet; Baxter is developing a software package for Connex devices with the Newmar radio. Until it arrives, control who can load PIM files onto the monitors and watch for radio settings that change without a work order.

Find Newmar-equipped units. List CVSM 68, CIWS 85 and CSM 75 devices with the Newmar radio.
Control PIM file loading. Limit radio updates and certificate installs to biomed staff with a documented procedure.
Watch for connectivity loss. Treat an unexplained drop in clinical data connectivity as a possible radio reconfiguration.
Apply Baxter's package. Install the mitigation software as soon as Baxter releases it.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

Wireless connectivity Field-updatable firmware

Connex Vital Signs Monitor

PID-27 Wireless connectivity Field-updatable firmware

Connex Integrated Wall System

PID-27 Wireless connectivity

Connex Spot Monitor

PID-27 Wireless connectivity

Fix the class in your product

The updater does not verify who it talks to or what it installs. As the maker, verify the server certificate and a cryptographic signature on the payload against a device-provisioned key before anything is written. Transport and payload signing are separate controls, and you need both.

Sign the payload. Verify a signature against a key provisioned on the device; refuse unsigned or tampered images.
Verify the server. Validate the full TLS chain and reject a mismatch rather than proceeding.
Block rollback. Refuse downgraded images so an attacker cannot force a known-vulnerable version.

Mapped EMB3D mitigations

Questions & Answers

Which Baxter Connex devices are affected by the Newmar radio vulnerability?

Baxter bulletin 80031885 Rev. A lists the Connex Vital Signs Monitor 68 Series and Connex Integrated Wall System 85 Series manufactured after June 27, 2018, and the Connex Spot Monitor 75 Series, when fitted with the Newmar radio.

Is there a fix for the Newmar radio PIM file flaw in Baxter Connex monitors?

As of the February 18, 2026 bulletin, Baxter was developing a new software package to mitigate the Newmar radio PIM file handling flaw in Connex CVSM, CIWS and CSM devices.

← Back to Vulnerabilities