Lucene search
HistorySep 09, 2022 - 3:15 p.m.
CVE-2022-26394
baxter spectrum wbm
mutual authentication
man-in-the-middle
network connections
5.4 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
0.0005 Low
EPSS
Percentile
16.2%
The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail.
Affected configurations
Node
baxterspectrum_wireless_battery_module_firmwareRange20d29–20d32
ORbaxterspectrum_wireless_battery_module_firmwareMatch16
ORbaxterspectrum_wireless_battery_module_firmwareMatch16d38
ORbaxterspectrum_wireless_battery_module_firmwareMatch17
ORbaxterspectrum_wireless_battery_module_firmwareMatch17d19
baxterspectrum_wireless_battery_moduleMatch-
Node
baxtersigma_spectrum_35700bax_firmwareMatch-
baxtersigma_spectrum_35700baxMatch-
Node
baxtersigma_spectrum_35700bax2_firmwareMatch-
baxtersigma_spectrum_35700bax2Match-
Node
baxterbaxter_spectrum_iq_35700bax3_firmwareMatch-
baxterbaxter_spectrum_iq_35700bax3Match-
Related
prion
prion
Authentication flaw
2022-09-09 15:15:00
cvelist
cvelist
CVE-2022-26394 Unauthenticated network reconfiguration via TCP/UDP
2022-09-08 00:00:00
cve
cve
CVE-2022-26394
2022-09-09 15:15:09
thn
thn
New Vulnerabilities Reported in Baxter's Internet-Connected Infusion Pumps
2022-09-08 17:55:00
ics
ics
Baxter Sigma Spectrum Infusion Pump (Update A)
2022-09-29 12:00:00
rapid7blog
rapid7blog
Baxter SIGMA Spectrum Infusion Pumps: Multiple Vulnerabilities (FIXED)
2022-09-08 16:30:00
5.4 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
LOW
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
0.0005 Low
EPSS
Percentile
16.2%
Related for NVD:CVE-2022-26394