Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-26392

Format String vulnerability

The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information.

CVSS 3.1 · 3.1 Low EPSS < 1% KEV · Not listed
Vendors
Baxter
Products
Baxter Spectrum Iq 35700bax3 Baxter Spectrum Iq 35700bax3 Firmware Sigma Spectrum 35700bax and 5 more
CVE-2022-26390

Unencrypted internal storage of security credentials

The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information.

CVSS 3.1 · 4.2 Medium EPSS < 1% KEV · Not listed
Vendors
Baxter
Products
Baxter Spectrum Iq 35700bax3 Baxter Spectrum Iq 35700bax3 Firmware Sigma Spectrum 35700bax and 5 more