CVE Feed

    Dashboard / CVE / CVE-2022-26390

    CVE-2022-26390

    The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information.

    Published:Sep 9, 2022
    Last Modified:Nov 21, 2024
    EPS:Sep 9, 2022
    EPSS Score:0.00075
    CVSS Score:4.2

    Affected Products

    Vendor
    Baxter
    Product
    Baxter Spectrum Iq 35700bax3
    Vendor
    Baxter
    Product
    Baxter Spectrum Iq 35700bax3 Firmware
    Vendor
    Baxter
    Product
    Sigma Spectrum 35700bax
    Vendor
    Baxter
    Product
    Sigma Spectrum 35700bax2
    Vendor
    Baxter
    Product
    Sigma Spectrum 35700bax2 Firmware
    Vendor
    Baxter
    Product
    Sigma Spectrum 35700bax Firmware
    Vendor
    Baxter
    Product
    Spectrum Wireless Battery Module
    Vendor
    Baxter
    Product
    Spectrum Wireless Battery Module Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High