CVE-2014-5434: Use of Hard-coded Password

Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new...

PT-2019-7127

Name of the Vulnerable Software and Affected Versions Baxter SIGMA Spectrum Infusion System version 6.05 Description The issue concerns a hard-coded password in the wireless battery module of the Baxter SIGMA Spectrum Infusion System. This password provides access to basic biomedical information,...

CVE-2014-5432: DEPRECATED: Authentication Bypass Issues

Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access...

PT-2019-7129

Name of the Vulnerable Software and Affected Versions Baxter SIGMA Spectrum Infusion System version 6.05 Description An unauthenticated remote attacker may be able to execute commands to view wireless account credentials stored in cleartext, potentially allowing access to the host network...

Baxter SIGMA Spectrum Infusion System Local Security Bypass Vulnerability

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system from Baxter. A local security bypass vulnerability exists in the Baxter SIGMA Spectrum Infusion System. A local attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Baxter Wireless Battery Module Security Bypass Vulnerability

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system, and the Baxter Wireless Battery WBM is one of the wireless power modules. A security vulnerability exists in the Baxter WBM that could be exploited by a remote attacker to gain unauthorized access and sensitive...

Baxter Wireless Battery Module Security Bypass Vulnerability (CNVD-2015-07228)

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system, and the Baxter Wireless Battery WBM is one of the wireless power modules. A security vulnerability exists in the Baxter WBM that could be exploited by a remote attacker to gain unauthorized access and sensitive...

Baxter Wireless Battery Module Security Bypass Vulnerability (CNVD-2015-07229)

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system, and the Baxter Wireless Battery WBM is one of the wireless power modules. A security vulnerability exists in the Baxter WBM that could be exploited by a remote attacker to gain unauthorized access and sensitive...

Baxter SIGMA Spectrum Infusion System Vulnerabilities

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on June 30, 2015, and is being released to the NCCIC/ICS-CERT web site. Researcher Jared Bird with Allina IS Security identified four vulnerabilities in Baxter’s SIGMA Spectrum Infusion System. Baxter has released a...

CIOs on mobile security: Choosing a platform

At a Churchill Club event in Santa Clara, Calif., Peter Solvik, managing director at Sigma Partners, talks to a panel of CIOs about how they’re making mobile devices more secure in the enterprise and whether their employees prefer the BlackBerry over the iPhone. The panel includes: Matt Carey,...

CVE-2000-1151

Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...

CVE-2000-1151

CVE-2000-1151 affects the Baxter IRC client on BeOS r5 Pro and earlier. The issue is a remote denial-of-service triggered by a message containing a long URL, with no additional exploit details or remedial steps provided in the accompanying documents.

CVE-2000-1151

Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...

CVE-2000-1151: Undefined Security Weakness

Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...

beos vulnerabilities

This advisory was actually written by me back in febuary this year, only to be misplaced and forgotten about until now. Some of the applications listed, most noteably baxter and the other irc clients, were patched earlier this year as a result of me informing the relevant developers. These...