CVE-2022-26390

Katalog CVE

CVSS 4.2 · Medium EPSS 0,47%

Kerentanan Missing Encryption of Sensitive Data pada baxter spectrum wireless battery module firmware, baxter sigma spectrum 35700bax firmware +2 lainnya. Skor CVSS 3.1 4.2 (Medium) menurut NVD.

Deskripsi (NVD)

The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information.

Rincian

Terbit di NVD

9 September 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

4.2 (Medium), sumber NVD
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-311: Missing Encryption of Sensitive Data
CWE-312: Cleartext Storage of Sensitive Information

EPSS (30 hari)

0,47% peluang dieksploitasi; lebih tinggi dari 39,2% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx advisory pihak ketiga · pemerintah AS
• https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01 advisory pihak ketiga · pemerintah AS