CVE-2022-26394
5.4
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Exploitability: 2.8 / Impact: 2.5
Source: NVD
Description
The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail.
Affected (8)
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| From 20d29 to 20d32 |
| Running on/with | Platform Versions |
|---|---|
Baxter Spectrum Wireless Battery Module | All versions |
Configuration B
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Baxter Sigma Spectrum 35700bax | All versions |
Configuration C
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Baxter Sigma Spectrum 35700bax2 | All versions |
Configuration D
| Vulnerable Software | Affected Versions |
|---|---|
| All versions |
| Running on/with | Platform Versions |
|---|---|
Baxter Baxter Spectrum Iq 35700bax3 | All versions |
References (3)
Source: nvd@nist.gov
Third Party AdvisoryUS Government Resource
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Timeline
No history available yet.