PT-2019-7129 · Baxter · Baxter Sigma Spectrum Infusion System

Publicado 2019-03-26 · Atualizado 2019-10-09 · CVE-2014-5433

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Baxter SIGMA Spectrum Infusion System version 6.05

Description An unauthenticated remote attacker may be able to execute commands to view wireless account credentials stored in cleartext, potentially allowing access to the host network.

Recommendations For Baxter SIGMA Spectrum Infusion System version 6.05, update to version 8, which incorporates necessary hardware and software changes to address the issue.

Correção

Cleartext Storage of Sensitive Information

Enumeração de Fraquezas

CWE-255

CWE-312

Identificadores relacionados

CVE-2014-5433

Produtos afetados

Baxter Sigma Spectrum Infusion System

Referências · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-5433 · Nota de Segurança
• https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01 · Nota