Skip to content
CVE PROGRAM SOURCE RECORD5.5 Medium

CVE-2022-26394

Unauthenticated network reconfiguration via TCP/UDP

Description

The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Baxter Baxter Spectrum Wireless Battery Module (WBM)

  • 16affected
  • 16D38affected
  • 17affected
  • 17D19affected
  • 20D29affected
  • 20D30affected
  • 20D31affected
  • 20D32affected

References