CVE-2022-26390 (GCVE-0-2022-26390)

Vulnerability from cvelistv5 – Published: 2022-09-09 14:40 – Updated: 2024-09-17 04:09
VLAI?
Summary
The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information.
CWE
  • CWE-311 - Missing Encryption of Sensitive Data
Assigner
References
Impacted products
Vendor Product Version
Baxter Baxter Spectrum Wireless Battery Module (WBM) Affected: 16
Affected: 16D38
Affected: 17
Affected: 17D19
Affected: 20D29
Affected: 20D30
Affected: 20D31
Affected: 20D32
Affected: 22D19
Affected: 22D20
Affected: 22D21
Affected: 22D22
Affected: 22D23
Affected: 22D24
Affected: 22D25
Affected: 22D26
Affected: 22D27
Affected: 22D28
Create a notification for this product.
Show details on NVD website

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-03T05:03:32.877Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "Baxter Spectrum Wireless Battery Module (WBM)",
          "vendor": "Baxter",
          "versions": [
            {
              "status": "affected",
              "version": "16"
            },
            {
              "status": "affected",
              "version": "16D38"
            },
            {
              "status": "affected",
              "version": "17"
            },
            {
              "status": "affected",
              "version": "17D19"
            },
            {
              "status": "affected",
              "version": "20D29"
            },
            {
              "status": "affected",
              "version": "20D30"
            },
            {
              "status": "affected",
              "version": "20D31"
            },
            {
              "status": "affected",
              "version": "20D32"
            },
            {
              "status": "affected",
              "version": "22D19"
            },
            {
              "status": "affected",
              "version": "22D20"
            },
            {
              "status": "affected",
              "version": "22D21"
            },
            {
              "status": "affected",
              "version": "22D22"
            },
            {
              "status": "affected",
              "version": "22D23"
            },
            {
              "status": "affected",
              "version": "22D24"
            },
            {
              "status": "affected",
              "version": "22D25"
            },
            {
              "status": "affected",
              "version": "22D26"
            },
            {
              "status": "affected",
              "version": "22D27"
            },
            {
              "status": "affected",
              "version": "22D28"
            }
          ]
        }
      ],
      "datePublic": "2022-09-08T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn\u0027t had all data and settings erased may be able to extract sensitive information."
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-311",
              "description": "CWE-311 Missing Encryption of Sensitive Data",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2022-09-09T14:40:06",
        "orgId": "dba971b9-eb30-4121-91e1-3b45611354aa",
        "shortName": "Baxter"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx"
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "Unencrypted internal storage of security credentials",
      "x_generator": {
        "engine": "Vulnogram 0.0.9"
      },
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "productsecurity@baxter.com",
          "DATE_PUBLIC": "2022-09-08T22:03:00.000Z",
          "ID": "CVE-2022-26390",
          "STATE": "PUBLIC",
          "TITLE": "Unencrypted internal storage of security credentials"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "Baxter Spectrum Wireless Battery Module (WBM)",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_name": "16",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "16D38",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "17",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "17D19",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "20D29",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "20D30",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "20D31",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "20D32",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D19",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D20",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D21",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D22",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D23",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D24",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D25",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D26",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D27",
                            "version_value": ""
                          },
                          {
                            "version_affected": "=",
                            "version_name": "22D28",
                            "version_value": ""
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "Baxter"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn\u0027t had all data and settings erased may be able to extract sensitive information."
            }
          ]
        },
        "generator": {
          "engine": "Vulnogram 0.0.9"
        },
        "impact": {
          "cvss": {
            "attackComplexity": "HIGH",
            "attackVector": "PHYSICAL",
            "availabilityImpact": "NONE",
            "baseScore": 4.2,
            "baseSeverity": "MEDIUM",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "NONE",
            "privilegesRequired": "NONE",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
            "version": "3.1"
          }
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "CWE-311 Missing Encryption of Sensitive Data"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx",
              "refsource": "MISC",
              "url": "https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx"
            }
          ]
        },
        "source": {
          "discovery": "EXTERNAL"
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "dba971b9-eb30-4121-91e1-3b45611354aa",
    "assignerShortName": "Baxter",
    "cveId": "CVE-2022-26390",
    "datePublished": "2022-09-09T14:40:06.351985Z",
    "dateReserved": "2022-03-03T00:00:00",
    "dateUpdated": "2024-09-17T04:09:45.443Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1",
  "vulnerability-lookup:meta": {
    "fkie_nvd": {
      "configurations": "[{\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"20d29\", \"versionEndIncluding\": \"20d32\", \"matchCriteriaId\": \"34DB00B2-DE3D-4D7B-9F03-35060096C37C\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:*:*:*:*:*:*:*:*\", \"versionStartIncluding\": \"22d19\", \"versionEndIncluding\": \"22d28\", \"matchCriteriaId\": \"87121F24-64BD-4D6D-8467-5FBCCE0512C1\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:16:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"719496E8-9020-456F-8CCC-FDFE10CF2820\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:16d38:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"03DA9071-305A-4319-9807-1BD6F9EB8FDB\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:17:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"4C68B374-58AD-4E71-9B83-3CA0241B8A4A\"}, {\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:17d19:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"85202DB1-56E1-43C6-81BC-C141862D72C0\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:baxter:spectrum_wireless_battery_module:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"15E8AA9C-1024-482D-8636-551486698A8C\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:baxter:sigma_spectrum_35700bax_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"1354B2D0-A259-4832-BB3D-BD9C157FB5C0\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:baxter:sigma_spectrum_35700bax:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"2EAFF022-6879-4734-9AEB-DE45E6E235DE\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:baxter:sigma_spectrum_35700bax2_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"E2715381-CA8F-416B-B9AD-9CDBDC181338\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:baxter:sigma_spectrum_35700bax2:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"576C9566-DA3F-43E8-B4E8-C5DEF3B06696\"}]}]}, {\"operator\": \"AND\", \"nodes\": [{\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": true, \"criteria\": \"cpe:2.3:o:baxter:baxter_spectrum_iq_35700bax3_firmware:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"89AFD13D-97D8-40A5-B36B-9B65229302B1\"}]}, {\"operator\": \"OR\", \"negate\": false, \"cpeMatch\": [{\"vulnerable\": false, \"criteria\": \"cpe:2.3:h:baxter:baxter_spectrum_iq_35700bax3:-:*:*:*:*:*:*:*\", \"matchCriteriaId\": \"71D6364A-9707-4BB0-8808-AF3314026A79\"}]}]}]",
      "descriptions": "[{\"lang\": \"en\", \"value\": \"The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn\u0027t had all data and settings erased may be able to extract sensitive information.\"}, {\"lang\": \"es\", \"value\": \"El M\\u00f3dulo de Bater\\u00eda Inal\\u00e1mbrica (WBM) de Baxter Spectrum almacena credenciales de red y PHI (s\\u00f3lo aplicable a las bombas Spectrum IQ que usan programaci\\u00f3n autom\\u00e1tica) de forma no cifrada. Un atacante con acceso f\\u00edsico a un dispositivo al que no le han sido borrados todos los datos y configuraciones puede ser capaz de extraer informaci\\u00f3n confidencial\"}]",
      "id": "CVE-2022-26390",
      "lastModified": "2024-11-21T06:53:53.800",
      "metrics": "{\"cvssMetricV31\": [{\"source\": \"productsecurity@baxter.com\", \"type\": \"Secondary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 4.2, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"PHYSICAL\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 0.5, \"impactScore\": 3.6}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"cvssData\": {\"version\": \"3.1\", \"vectorString\": \"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\", \"baseScore\": 4.2, \"baseSeverity\": \"MEDIUM\", \"attackVector\": \"PHYSICAL\", \"attackComplexity\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"userInteraction\": \"NONE\", \"scope\": \"UNCHANGED\", \"confidentialityImpact\": \"HIGH\", \"integrityImpact\": \"NONE\", \"availabilityImpact\": \"NONE\"}, \"exploitabilityScore\": 0.5, \"impactScore\": 3.6}]}",
      "published": "2022-09-09T15:15:09.453",
      "references": "[{\"url\": \"https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx\", \"source\": \"productsecurity@baxter.com\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01\", \"source\": \"nvd@nist.gov\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}, {\"url\": \"https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx\", \"source\": \"af854a3a-2127-422b-91ae-364da2661108\", \"tags\": [\"Third Party Advisory\", \"US Government Resource\"]}]",
      "sourceIdentifier": "productsecurity@baxter.com",
      "vulnStatus": "Modified",
      "weaknesses": "[{\"source\": \"productsecurity@baxter.com\", \"type\": \"Secondary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-311\"}]}, {\"source\": \"nvd@nist.gov\", \"type\": \"Primary\", \"description\": [{\"lang\": \"en\", \"value\": \"CWE-312\"}]}]"
    },
    "nvd": "{\"cve\":{\"id\":\"CVE-2022-26390\",\"sourceIdentifier\":\"productsecurity@baxter.com\",\"published\":\"2022-09-09T15:15:09.453\",\"lastModified\":\"2024-11-21T06:53:53.800\",\"vulnStatus\":\"Modified\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn\u0027t had all data and settings erased may be able to extract sensitive information.\"},{\"lang\":\"es\",\"value\":\"El M\u00f3dulo de Bater\u00eda Inal\u00e1mbrica (WBM) de Baxter Spectrum almacena credenciales de red y PHI (s\u00f3lo aplicable a las bombas Spectrum IQ que usan programaci\u00f3n autom\u00e1tica) de forma no cifrada. Un atacante con acceso f\u00edsico a un dispositivo al que no le han sido borrados todos los datos y configuraciones puede ser capaz de extraer informaci\u00f3n confidencial\"}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"productsecurity@baxter.com\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.2,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":0.5,\"impactScore\":3.6},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N\",\"baseScore\":4.2,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"PHYSICAL\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"HIGH\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"NONE\"},\"exploitabilityScore\":0.5,\"impactScore\":3.6}]},\"weaknesses\":[{\"source\":\"productsecurity@baxter.com\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-311\"}]},{\"source\":\"nvd@nist.gov\",\"type\":\"Primary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-312\"}]}],\"configurations\":[{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"20d29\",\"versionEndIncluding\":\"20d32\",\"matchCriteriaId\":\"34DB00B2-DE3D-4D7B-9F03-35060096C37C\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:*:*:*:*:*:*:*:*\",\"versionStartIncluding\":\"22d19\",\"versionEndIncluding\":\"22d28\",\"matchCriteriaId\":\"87121F24-64BD-4D6D-8467-5FBCCE0512C1\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:16:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"719496E8-9020-456F-8CCC-FDFE10CF2820\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:16d38:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"03DA9071-305A-4319-9807-1BD6F9EB8FDB\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:17:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"4C68B374-58AD-4E71-9B83-3CA0241B8A4A\"},{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:17d19:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"85202DB1-56E1-43C6-81BC-C141862D72C0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:baxter:spectrum_wireless_battery_module:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"15E8AA9C-1024-482D-8636-551486698A8C\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:baxter:sigma_spectrum_35700bax_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"1354B2D0-A259-4832-BB3D-BD9C157FB5C0\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:baxter:sigma_spectrum_35700bax:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"2EAFF022-6879-4734-9AEB-DE45E6E235DE\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:baxter:sigma_spectrum_35700bax2_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"E2715381-CA8F-416B-B9AD-9CDBDC181338\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:baxter:sigma_spectrum_35700bax2:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"576C9566-DA3F-43E8-B4E8-C5DEF3B06696\"}]}]},{\"operator\":\"AND\",\"nodes\":[{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":true,\"criteria\":\"cpe:2.3:o:baxter:baxter_spectrum_iq_35700bax3_firmware:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"89AFD13D-97D8-40A5-B36B-9B65229302B1\"}]},{\"operator\":\"OR\",\"negate\":false,\"cpeMatch\":[{\"vulnerable\":false,\"criteria\":\"cpe:2.3:h:baxter:baxter_spectrum_iq_35700bax3:-:*:*:*:*:*:*:*\",\"matchCriteriaId\":\"71D6364A-9707-4BB0-8808-AF3314026A79\"}]}]}],\"references\":[{\"url\":\"https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx\",\"source\":\"productsecurity@baxter.com\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01\",\"source\":\"nvd@nist.gov\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]},{\"url\":\"https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx\",\"source\":\"af854a3a-2127-422b-91ae-364da2661108\",\"tags\":[\"Third Party Advisory\",\"US Government Resource\"]}]}}"
  }
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.


Loading…

Loading…

Loading…

Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.


Loading…

Detection rules are retrieved from Rulezet.

Loading…

Loading…