ByteOS Network

NVD Vulnerability Details :

CVE-2014-5434

Modified

Source-ics-cert@hq.dhs.gov

Published At-26 Mar, 2019 | 15:29

Updated At-09 Oct, 2019 | 23:11

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.0	9.8	CRITICAL	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	2.0	5.0	MEDIUM	AV:N/AC:L/Au:N/C:P/I:N/A:N

CPE Matches

Baxter International, Inc.

>>sigma_spectrum_infusion_system_firmware>>6.05

cpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:6.05:*:*:*:*:*:*:*

Baxter International, Inc.

>>sigma_spectrum_infusion_system>>-

cpe:2.3:h:baxter:sigma_spectrum_infusion_system:-:*:*:*:*:*:*:*

Baxter International, Inc.

>>wireless_battery_module>>16

cpe:2.3:h:baxter:wireless_battery_module:16:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-798	Primary	nvd@nist.gov
CWE-259	Secondary	ics-cert@hq.dhs.gov

References

Hyperlink	Source	Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01	ics-cert@hq.dhs.gov	Mitigation US Government Resource Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History