Fresenius Kabi Agilia Connect Infusion System 授权问题漏洞

The Fresenius Kabi Agilia Connect Infusion System is an infusion system from Fresenius Kabi of Germany. A security vulnerability exists in the Fresenius Kabi Agilia Connect Infusion System, which stems from an application that allows user input to be validated on the client side without server...

Fresenius Kabi Agilia Connect Infusion System 加密问题漏洞

Fresenius Kabi Agilia Connect Infusion System is an infusion system from the German company Fresenius Kabi.The Fresenius Kabi Agilia Connect Infusion System is vulnerable to an encryption issue that could be exploited by an attacker to eavesdrop on transmitted data, manipulate data purportedly...

Fresenius Kabi Agilia Connect Infusion System 加密问题漏洞

An encryption vulnerability exists in the Fresenius Kabi Agilia Connect Infusion System, an infusion system from the German company Fresenius Kabi, which stems from the product's use of plaintext to An attacker could use this vulnerability to gain access to sensitive information...

Fresenius Kabi Agilia Connect Infusion System 信任管理问题漏洞

Fresenius Kabi Agilia Connect Infusion System is an infusion system from the German company Fresenius Kabi.Fresenius Kabi Agilia Connect Infusion System is vulnerable to a trust management issue that could be exploited by attackers to gain privileges for all installations of the software...

Fresenius Kabi Agilia Connect Infusion System 信任管理问题漏洞

Fresenius Kabi Agilia Connect Infusion System is an infusion system from the German company Fresenius Kabi.The Fresenius Kabi Agilia Connect Infusion System is vulnerable to an access control error, which could be exploited by an attacker to act as unauthenticated user to send requests to sensiti...

Fresenius Kabi Agilia Connect Infusion System 信息泄露漏洞

Fresenius Kabi Agilia Connect Infusion System is an infusion system from the German company Fresenius Kabi.The Fresenius Kabi Agilia Connect Infusion System is vulnerable to information disclosure, which could be exploited by attackers to identify and access files on the server...

CVE-2020-12040

Sigma Spectrum Infusion System v's6.x model 35700BAX and Baxter Spectrum Infusion System Versions 8.x model 35700BAX2 at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has...

CVE-2020-12040

CVE-2020-12040 affects Sigma Spectrum Infusion System v6.x (model 35700BAX) and Baxter Spectrum Infusion System v8.x (model 35700BAX2); root cause is unauthenticated clear-text transmission of system status and operational data at the application layer, enabling eavesdropping or MiTM if network c...

PT-2020-13007

Name of the Vulnerable Software and Affected Versions Sigma Spectrum Infusion System versions 6.x Baxter Spectrum Infusion System versions 8.x Description The issue concerns the use of an unauthenticated clear-text communication channel at the application layer to send and receive system status a...

CVE-2020-12039: Use of Hard-coded Password

Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration value...

CVE-2020-12040: Cleartext Transmission of Sensitive Information

Sigma Spectrum Infusion System v's6.x model 35700BAX and Baxter Spectrum Infusion System Versions 8.x model 35700BAX2 at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has...

PT-2020-13006

Name of the Vulnerable Software and Affected Versions Baxter Sigma Spectrum Infusion System versions 6.x through 8.x Description The issue concerns hardcoded passwords in the Baxter Sigma Spectrum Infusion System. When these passwords are physically entered on the keypad, they provide access to...

Baxter Sigma Spectrum Infusion System and Spectrum Infusion System Trust Management Issues Vulnerabilities

The Baxter Sigma Spectrum Infusion System and the Baxter Spectrum Infusion System are both infusion pumps from Baxter, Inc. A trust management issue vulnerability exists in the Baxter Sigma Spectrum Infusion System version 6.x model 35700BAX and the Baxter Spectrum Infusion System version 8.x mod...

Unspecified Vulnerability in Baxter Sigma Spectrum Infusion System and Baxter Spectrum Infusion System

The Baxter Sigma Spectrum Infusion System and the Baxter Spectrum Infusion System are both infusion pumps from Baxter, Inc. A security vulnerability exists in the Baxter Sigma Spectrum Infusion System version 6.x model 35700BAX and the Baxter Spectrum Infusion System version 8.x model 35700BAX2,...

BD Alaris Gateway Workstation Arbitrary File Upload Vulnerability

BD Alaris Gateway Workstation is an intelligent infusion system, BD Alaris GS is a medical syringe pump, and BD Alaris GH is a medical syringe pump. The BD Alaris Gateway Workstation has arbitrary file upload vulnerabilities. An attacker could use these vulnerabilities to upload arbitrary files t...

CVE-2014-5431

Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 contains a hard-coded password, which provides access to basic biomedical information, limited device settings, and network configuration of the WBM, if connected. The hard-coded password...

CVE-2014-5432

Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access...

Command injection

Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access...

Design/Logic Flaw

An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16, which may allow an attacker to gain access the hos...

CVE-2014-5433

An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16, which may allow an attacker to gain access the hos...