PT-2019-7128 · Baxter · Baxter Sigma Spectrum Infusion System

Publicado 2019-03-26 · Atualizado 2019-10-09 · CVE-2014-5432

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Baxter SIGMA Spectrum Infusion System version 6.05

Description The issue allows remote access via Port 22/SSH without authentication, enabling a remote attacker to make unauthorized configuration changes to the wireless battery module (WBM) and potentially access account credentials and shared keys. It is noted that this vulnerability does not allow control of the SIGMA Spectrum infusion pump from the WBM.

Recommendations For Baxter SIGMA Spectrum Infusion System version 6.05, update to Version 8, which incorporates necessary hardware and software changes to address the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-592

CWE-287

Identificadores relacionados

CVE-2014-5432

Produtos afetados

Baxter Sigma Spectrum Infusion System

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-5432 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01 · Nota