Skip to content
OpenAdvisories

Vendor

Baxter

20 known vulnerabilities.

Products

Life2000 Ventilation System 8 SIGMA Spectrum Infusion System 4 Baxter Spectrum Wireless Battery Module (WBM) 4 Connex Health Portal 2 Welch Allyn Configuration Tool 1 Welch Allyn Connex Spot Monitor 1 SIGMA Spectrum Infusion System(model 35700BAX) 0 Spectrum IQ 0 Spectrum IQ LVP 0 Spectrum 0 Sigma Spectrum LVP 0 Sigma Spectrum 0 Spectrum LVP 0 Phoenix Hemodialysis Delivery System 0 ExactaMix EM2400 0 ExactaMix EM1200 0 Welch Allyn Connex Spot Monitor (CSM) 0 Welch Allyn Product Configuration Tool 0 PrisMax 0 PrismaFlex 0
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.0
    CVE-2022-26393

    Format String vulnerability

    The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service (DoS) on the WBM.

    Baxter Baxter Spectrum Wireless Battery Module (WBM)
  • Medium 4.2
    CVE-2022-26390

    Unencrypted internal storage of security credentials

    The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased m…

    Baxter Baxter Spectrum Wireless Battery Module (WBM)
  • Medium 5.5
    CVE-2022-26394

    Unauthenticated network reconfiguration via TCP/UDP

    The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail.

    Baxter Baxter Spectrum Wireless Battery Module (WBM)