QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-26392

Back to search

CVE-2022-26392

Published: Sep 9, 2022

Modified: Sep 17, 2024

PUBLISHED

CVSS v3.1

3.1

LOW

Description

The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information.

VendorProductVersions

Baxter

Baxter Spectrum Wireless Battery Module (WBM)

affected
16
affected
16D38
affected
17
affected
17D19
affected
20D29

+3 more versions

Weaknesses (CWE)

CWE-134

CVSS v3.1 Details

CVSS v3.1 Vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

Attack Vector

Network

Attack Complexity

High

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now