PT-2022-17825 · Baxter · Baxter Spectrum Wbm

Deral Heiland · Published 2022-09-09 · Updated 2022-09-15 · CVE-2022-26393

Positive Technologies (AI Summary)

CVSS v3.1

8.1

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

Name of the Vulnerable Software and Affected Versions Baxter Spectrum WBM (affected versions not specified)

Description The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service (DoS) on the WBM.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2022-26393

Affected Products

Baxter Spectrum Wbm

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-26393 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26393 · Vendor Advisory
• https://t.me/cibsecurity/49508 · Telegram Post
• https://cisa.gov/uscert/ics/advisories/icsma-22-251-01 · Note
• https://us-cert.gov/ics/advisories/icsma-22-xxx-xx · Note