CVE-2014-5434

Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new...

CVE-2014-5433: Cleartext Storage of Sensitive Information

An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16, which may allow an attacker to gain access the hos...

CVE-2014-5432: DEPRECATED: Authentication Bypass Issues

Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 is remotely accessible via Port 22/SSH without authentication. A remote attacker may be able to make unauthorized configuration changes to the WBM, as well as issue commands to access...

CVE-2014-5431: Use of Hard-coded Password

Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 contains a hard-coded password, which provides access to basic biomedical information, limited device settings, and network configuration of the WBM, if connected. The hard-coded password...

CVE-2014-5434: Use of Hard-coded Password

Baxter SIGMA Spectrum Infusion System version 6.05 model 35700BAX with wireless battery module WBM version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new...

Baxter SIGMA Spectrum Infusion System Local Security Bypass Vulnerability

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system from Baxter. A local security bypass vulnerability exists in the Baxter SIGMA Spectrum Infusion System. A local attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Baxter Wireless Battery Module Security Bypass Vulnerability

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system, and the Baxter Wireless Battery WBM is one of the wireless power modules. A security vulnerability exists in the Baxter WBM that could be exploited by a remote attacker to gain unauthorized access and sensitive...

Baxter Wireless Battery Module Security Bypass Vulnerability (CNVD-2015-07228)

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system, and the Baxter Wireless Battery WBM is one of the wireless power modules. A security vulnerability exists in the Baxter WBM that could be exploited by a remote attacker to gain unauthorized access and sensitive...

Baxter Wireless Battery Module Security Bypass Vulnerability (CNVD-2015-07229)

The Baxter SIGMA Spectrum Infusion System is an intelligent infusion system, and the Baxter Wireless Battery WBM is one of the wireless power modules. A security vulnerability exists in the Baxter WBM that could be exploited by a remote attacker to gain unauthorized access and sensitive...

Baxter SIGMA Spectrum Infusion System Vulnerabilities

OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on June 30, 2015, and is being released to the NCCIC/ICS-CERT web site. Researcher Jared Bird with Allina IS Security identified four vulnerabilities in Baxter’s SIGMA Spectrum Infusion System. Baxter has released a...

CIOs on mobile security: Choosing a platform

At a Churchill Club event in Santa Clara, Calif., Peter Solvik, managing director at Sigma Partners, talks to a panel of CIOs about how they’re making mobile devices more secure in the enterprise and whether their employees prefer the BlackBerry over the iPhone. The panel includes: Matt Carey,...

CVE-2000-1151

Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...

CVE-2000-1151

CVE-2000-1151 affects the Baxter IRC client on BeOS r5 Pro and earlier. The issue is a remote denial-of-service triggered by a message containing a long URL, with no additional exploit details or remedial steps provided in the accompanying documents.

CVE-2000-1151

Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...

CVE-2000-1151: Undefined Security Weakness

Baxter IRC client in BeOS r5 pro and earlier allows remote attackers to conduct a denial of service via a message that contains a long URL...

beos vulnerabilities

This advisory was actually written by me back in febuary this year, only to be misplaced and forgotten about until now. Some of the applications listed, most noteably baxter and the other irc clients, were patched earlier this year as a result of me informing the relevant developers. These...