Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Baxter Component: Spectrum Wireless Battery Module Firmware Clear all filters
TI-2022-09763 CVE-2022-26393 · GHSA-7jwf-qrf9-jrfx

Format String vulnerability

Priority LOW 36

The Baxter Spectrum WBM is susceptible to format string attacks via application messaging.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00707 Published 2022-09-09 No fix listed CWE-134
TI-2022-09761 CVE-2022-26390 · GHSA-8rq7-p3vq-fh83

Unencrypted internal storage of security credentials

Priority LOW 20

The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form.

CVSS 3.1MEDIUM 4.2 Physical No auth No interaction EPSS 0.00475 Published 2022-09-09 No fix listed CWE-311
TI-2022-09762 CVE-2022-26392 · GHSA-36g6-rvxx-r5jm

Format String vulnerability

Priority LOW 30

The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00694 Published 2022-09-09 No fix listed CWE-134
TI-2022-09764 CVE-2022-26394 · GHSA-cf6p-6fqm-mpw5

Unauthenticated network reconfiguration via TCP/UDP

Priority LOW 25

The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host.

CVSS 3.1MEDIUM 5.5 Adjacent network Low privileges No interaction EPSS 0.00352 Published 2022-09-09 No fix listed CWE-306