Vulnerability Details CVE-2022-26392
The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 48.7%
CVSS Severity
CVSS v3 Score 3.1
References
Products affected by CVE-2022-26392
-
cpe:2.3:h:baxter:baxter_spectrum_iq_35700bax3:-
-
cpe:2.3:h:baxter:sigma_spectrum_35700bax2:-
-
cpe:2.3:h:baxter:sigma_spectrum_35700bax:-
-
cpe:2.3:h:baxter:spectrum_wireless_battery_module:-
-
cpe:2.3:o:baxter:baxter_spectrum_iq_35700bax3_firmware:-
-
cpe:2.3:o:baxter:sigma_spectrum_35700bax2_firmware:-
-
cpe:2.3:o:baxter:sigma_spectrum_35700bax_firmware:-
-
cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:16
-
cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:16d38
-
cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:17
-
cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:17d19
-
cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:20d29
-
cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:20d32