Baxter Spectrum Wireless Battery Module Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Baxter Spectrum Wireless Battery Module Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-26394 — CVSS 5.5 (medium): The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in…
• CVE-2022-26393 — CVSS 5.0 (medium): The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the…
• CVE-2022-26390 — CVSS 4.2 (medium): The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto…
• CVE-2022-26392 — CVSS 3.1 (low): The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to…