PT-2019-7129 · Baxter · Baxter Sigma Spectrum Infusion System

Published 2019-03-26 · Updated 2019-10-09 · CVE-2014-5433

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Baxter SIGMA Spectrum Infusion System version 6.05

Description An unauthenticated remote attacker may be able to execute commands to view wireless account credentials stored in cleartext, potentially allowing access to the host network.

Recommendations For Baxter SIGMA Spectrum Infusion System version 6.05, update to version 8, which incorporates necessary hardware and software changes to address the issue.

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-255

CWE-312

Related Identifiers

CVE-2014-5433

Affected Products

Baxter Sigma Spectrum Infusion System

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-5433 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01 · Note