CVE Feed

    Dashboard / CVE / CVE-2022-26393

    CVE-2022-26393

    The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service (DoS) on the WBM.

    Published:Sep 9, 2022
    Last Modified:Nov 21, 2024
    EPS:Sep 9, 2022
    EPSS Score:0.00218
    CVSS Score:5

    Affected Products

    Vendor
    Baxter
    Product
    Baxter Spectrum Iq 35700bax3
    Vendor
    Baxter
    Product
    Baxter Spectrum Iq 35700bax3 Firmware
    Vendor
    Baxter
    Product
    Sigma Spectrum 35700bax
    Vendor
    Baxter
    Product
    Sigma Spectrum 35700bax2
    Vendor
    Baxter
    Product
    Sigma Spectrum 35700bax2 Firmware
    Vendor
    Baxter
    Product
    Sigma Spectrum 35700bax Firmware
    Vendor
    Baxter
    Product
    Spectrum Wireless Battery Module
    Vendor
    Baxter
    Product
    Spectrum Wireless Battery Module Firmware

    Exploits

    No exploit reference

    Common Attack Pattern Enumeration and Classification (CAPEC)

    CAPEC-135 Format String Injection
    CAPEC-67 String Format Overflow in syslog()

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High