Skip to content
OpenAdvisories
Medium · 5.5 CVE-2022-26394 EUVD-2022-30953GHSA-cf6p-6fqm-mpw5

Unauthenticated network reconfiguration via TCP/UDP

Published Sep 9, 2022 · Updated Sep 16, 2024 · Assigned by Baxter

Description

The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail.

Affected products

VendorProductAffectedFixed
Baxter Baxter Spectrum Wireless Battery Module (WBM) 16, 16D38, 17, 17D19, 20D29, 20D30, 20D31, 20D32 —

Advisories 1

References