CVE-2022-26394
mediumPriorität · verfolgen · 22OT-Risiko · erhöhtEPSS 0.004 · 29. PerzentilEUUSEPSS · bewertet 2026-10-27
The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenBaxter Spectrum IQcisa_csaf_ot
According to Baxter, software updates to disable Telnet and FTP (CVE-2022-26392) are in process. Software updates addressing the format string attack (CVE-2022-26393) are included in WBM version 20D30 and all other WBM versions authentication is already available in Spectrum IQ (CVE-2022-26394). Instructions to erase all data and settings on WBMs and pumps before decommissioning and transferring to other facilities (CVE-2022-26390) are in process for incorporation into the Spectrum Operator's Manual.
- BehobenBaxter Spectrum IQ LVPcisa_csaf_ot
According to Baxter, software updates to disable Telnet and FTP (CVE-2022-26392) are in process. Software updates addressing the format string attack (CVE-2022-26393) are included in WBM version 20D30 and all other WBM versions authentication is already available in Spectrum IQ (CVE-2022-26394). Instructions to erase all data and settings on WBMs and pumps before decommissioning and transferring to other facilities (CVE-2022-26390) are in process for incorporation into the Spectrum Operator's Manual.
- BehobenSigma Spectrumcisa_csaf_ot
According to Baxter, software updates to disable Telnet and FTP (CVE-2022-26392) are in process. Software updates addressing the format string attack (CVE-2022-26393) are included in WBM version 20D30 and all other WBM versions authentication is already available in Spectrum IQ (CVE-2022-26394). Instructions to erase all data and settings on WBMs and pumps before decommissioning and transferring to other facilities (CVE-2022-26390) are in process for incorporation into the Spectrum Operator's Manual.
- BehobenSigma Spectrum LVPcisa_csaf_ot
According to Baxter, software updates to disable Telnet and FTP (CVE-2022-26392) are in process. Software updates addressing the format string attack (CVE-2022-26393) are included in WBM version 20D30 and all other WBM versions authentication is already available in Spectrum IQ (CVE-2022-26394). Instructions to erase all data and settings on WBMs and pumps before decommissioning and transferring to other facilities (CVE-2022-26390) are in process for incorporation into the Spectrum Operator's Manual.
- MitigationBaxter Spectrum IQcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump; the Spectrum Infusion System was designed to operate without network access. This action would impact an organization’s ability to rapidly deploy drug library (formulary) updates to their pumps.
- MitigationBaxter Spectrum IQ LVPcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump; the Spectrum Infusion System was designed to operate without network access. This action would impact an organization’s ability to rapidly deploy drug library (formulary) updates to their pumps.
- MitigationSigma Spectrumcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump; the Spectrum Infusion System was designed to operate without network access. This action would impact an organization’s ability to rapidly deploy drug library (formulary) updates to their pumps.
- MitigationSigma Spectrum LVPcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump; the Spectrum Infusion System was designed to operate without network access. This action would impact an organization’s ability to rapidly deploy drug library (formulary) updates to their pumps.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–7.5
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (27)
Betroffene Produkte und Versionsbereiche.
- Baxter Baxter Spectrum IQ LVP≤ 9.x (with Wireless Battery Modules >= 22D19 | <= v22D28)cisa_csaf_otUS
- Baxter Sigma Spectrum LVP≤ 6.x (Wireless Battery Modules (16 | 16D38 | 17 | 17D19 | >= 20D29 | <= v20D32 | >= 22D24 | <= v22D28)cisa_csaf_otUS
- Baxter Sigma Spectrum LVP≤ 8.x (Wireless Battery Modules v17 | v17D19 >= 20D29 | <= 20D32 | >= 22D24 | <= 22D28)cisa_csaf_otUS
- baxter baxter spectrum iq 35700bax3 firmwarealle VersionennvdUScpe:2.3:o:baxter:baxter_spectrum_iq_35700bax3_firmware:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSMA-22-251-01Baxter Sigma Spectrum Infusion Pump (Update A)2022-09-08icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could result in access to sensitive data and alteration of system configuration.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (8)
Externe Belege — Patches, Meldungen, Analysen.
- https://cxsecurity.com/cveshow/CVE-2022-26394/cnnvd
- https://us-cert.cisa.gov/ics/advisories/icsma-22-251-01cnnvd
- https://www.baxter.com/product-security#additionalresourcesPatchcnnvd
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01cnnvd
- https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xxcnnvd
- https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xxenisa_euvd
- https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01Third Party AdvisoryUS Government Resourcenvd
- https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xxBroken Linknvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan