CVE-2014-5434

2019-03-2614:59:52

CWE-259

icscert

www.cve.org

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

59.7%

JSON

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.

CNA Affected

[
  {
    "product": "SIGMA Spectrum Infusion System",
    "vendor": "Baxter",
    "versions": [
      {
        "status": "affected",
        "version": "6.05 (model 35700BAX) with wireless battery module (WBM) version 16"
      }
    ]
  }
]

References

ics-cert.us-cert.gov/advisories/ICSA-15-181-01