CVE-2022-26390

 

Published at: - 09-09-2022 05:15

Last modified: - 12-01-2023 08:31

Total changes: - 5

Description

The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx
• https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01

 

Keywords

NVD

 

CVE-2022-26390

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures