Lucene search

[email protected]CVE-2022-26392

HistorySep 09, 2022 - 3:15 p.m.

CVE-2022-26392

2022-09-0915:15:09

CWE-134

[email protected]

web.nvd.nist.gov

baxter spectrum wbm

vulnerability

cve-2022-26392

format string attack

nvd

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.5%

JSON

The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information.

Affected configurations

NVD

Node

baxterspectrum_wireless_battery_moduleMatch-

AND

baxterspectrum_wireless_battery_module_firmwareRange20d29–20d32

baxterspectrum_wireless_battery_module_firmwareMatch16

baxterspectrum_wireless_battery_module_firmwareMatch16d38

baxterspectrum_wireless_battery_module_firmwareMatch17

baxterspectrum_wireless_battery_module_firmwareMatch17d19

Node

baxtersigma_spectrum_35700baxMatch-

AND

baxtersigma_spectrum_35700bax_firmwareMatch-

Node

baxtersigma_spectrum_35700bax2Match-

AND

baxtersigma_spectrum_35700bax2_firmwareMatch-

Node

baxterbaxter_spectrum_iq_35700bax3Match-

AND

baxterbaxter_spectrum_iq_35700bax3_firmwareMatch-

CPENameOperatorVersion
baxter:spectrum_wireless_battery_module_firmwarebaxter spectrum wireless battery module firmwarele20d32
baxter:spectrum_wireless_battery_module_firmwarebaxter spectrum wireless battery module firmwareeq16
baxter:spectrum_wireless_battery_module_firmwarebaxter spectrum wireless battery module firmwareeq16d38
baxter:spectrum_wireless_battery_module_firmwarebaxter spectrum wireless battery module firmwareeq17
baxter:spectrum_wireless_battery_module_firmwarebaxter spectrum wireless battery module firmwareeq17d19

CPE	Name	Operator	Version
baxter:spectrum_wireless_battery_module_firmware	baxter spectrum wireless battery module firmware	le	20d32
baxter:spectrum_wireless_battery_module_firmware	baxter spectrum wireless battery module firmware	eq	16
baxter:spectrum_wireless_battery_module_firmware	baxter spectrum wireless battery module firmware	eq	16d38
baxter:spectrum_wireless_battery_module_firmware	baxter spectrum wireless battery module firmware	eq	17
baxter:spectrum_wireless_battery_module_firmware	baxter spectrum wireless battery module firmware	eq	17d19

CNA Affected

[
  {
    "product": "Baxter Spectrum Wireless Battery Module (WBM)",
    "vendor": "Baxter",
    "versions": [
      {
        "status": "affected",
        "version": "16  "
      },
      {
        "status": "affected",
        "version": "16D38  "
      },
      {
        "status": "affected",
        "version": "17  "
      },
      {
        "status": "affected",
        "version": "17D19  "
      },
      {
        "status": "affected",
        "version": "20D29  "
      },
      {
        "status": "affected",
        "version": "20D30  "
      },
      {
        "status": "affected",
        "version": "20D31  "
      },
      {
        "status": "affected",
        "version": "20D32  "
      }
    ]
  }
]