CVE-2022-26390 Unencrypted internal storage of security credentials

The Baxter Spectrum Wireless Battery Module WBM stores network credentials and PHI only applicable to Spectrum IQ pumps using auto programming in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive informatio...

CVE-2022-26390

CVE-2022-26390 affects Baxter SIGMA Spectrum/Spectrum/WBM: Wireless Battery Module versions (e.g., v16, v16D38, v17, v17D19, v20D29–v20D32, v22D19–v22D28) where network credentials and PHI stored in unencrypted form on the WBM. Exploitation requires physical access to a device that hasn’t had dat...

Baxter Sigma Spectrum Infusion Pump (Update A)

1. EXECUTIVE SUMMARY --------- Begin Update A part 1 of 3 --------- CVSS v3 7.5 --------- End Update A part 1 of 3 --------- ATTENTION: Exploitable remotely Vendor: Baxter Equipment: Sigma and Baxter Spectrum Infusion Pumps Vulnerabilities: Missing Encryption of Sensitive Data, Use of Externally...