Read the docs

Baxter

Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical23CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Baxter records in CISA KEV

No Baxter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sigma Spectrum Infusion System Firmware 10 records MEDIUM Em1200 Firmware 6 records MEDIUM Em2400 Firmware 6 records MEDIUM Baxter Spectrum Iq 35700bax3 Firmware 4 records LOW Sigma Spectrum 35700bax2 Firmware 4 records LOW Sigma Spectrum 35700bax Firmware 4 records LOW Spectrum Wireless Battery Module Firmware 4 records LOW Prismaflex Firmware 3 records LOW

Records

4 records in Spectrum Wireless Battery Module Firmware · all components

TI-2022-09763 CVE-2022-26393 · GHSA-7jwf-qrf9-jrfx

Format String vulnerability

Priority LOW 36

The Baxter Spectrum WBM is susceptible to format string attacks via application messaging.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00707 Published 2022-09-09 No fix listed CWE-134
TI-2022-09762 CVE-2022-26392 · GHSA-36g6-rvxx-r5jm

Format String vulnerability

Priority LOW 30

The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00694 Published 2022-09-09 No fix listed CWE-134
TI-2022-09764 CVE-2022-26394 · GHSA-cf6p-6fqm-mpw5

Unauthenticated network reconfiguration via TCP/UDP

Priority LOW 25

The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host.

CVSS 3.1MEDIUM 5.5 Adjacent network Low privileges No interaction EPSS 0.00352 Published 2022-09-09 No fix listed CWE-306
TI-2022-09761 CVE-2022-26390 · GHSA-8rq7-p3vq-fh83

Unencrypted internal storage of security credentials

Priority LOW 20

The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form.

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00475 Published 2022-09-09 No fix listed CWE-311
Open these records in search →