CVE-2014-5432CWE-592

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via Port 22/SSH…

published March 26, 2019

CVSS
—
EPSS
3%
Percentile
85.1
In the wild
Unconfirmed
What it is

🚨 An unprotected SSH port leaves the door wide open for remote attackers! That means anyone could waltz in and make unauthorized changes to the Baxter SIGMA Spectrum Infusion System. 🔥 Think of it like a hotel room where the door is left unlocked — any guest can walk in, rearranging your belongings without you ever knowing. This vulnerability allows attackers to make changes to the system's configuration, similar to a mischievous guest playing with your room settings! With unauthorized access, an attacker could alter critical configurations and potentially access sensitive account credentials and shared keys. While Baxter assures that the infusion pump itself can't be controlled from this module, the risk of unauthorized changes remains alarming and could lead to significant distrust in the device's integrity.

Put simply

Think of it like a hotel room where the door is left unlocked — any guest can walk in, rearranging your belongings without you ever knowing. This vulnerability allows attackers to make changes to the system's configuration, similar to a mischievous guest playing with your room settings! This vulnerability arises because the Baxter SIGMA Spectrum Infusion System's wireless battery module (WBM) version 16 is accessible via Port 22 (SSH) without any authentication, enabling remote attackers to issue commands and change settings.

What to do

With unauthorized access, an attacker could alter critical configurations and potentially access sensitive account credentials and shared keys. While Baxter assures that the infusion pump itself can't be controlled from this module, the risk of unauthorized changes remains alarming and could lead to significant distrust in the device's integrity. To remediate this issue, promptly update to Version 8 of the SIGMA Spectrum Infusion System, which incorporates hardware and software changes that enhance security. Additionally, ensure that SSH access is appropriately secured and requires authentication to prevent unauthorized entry. You've got this! By following these steps, you'll be on your way to securing the system in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02573 · 85.1th percentile
Weakness
CWE-592 · DEPRECATED: Authentication Bypass Issues
Published
2019-03-26T15:17Z
EPSS history
Timeline
  • 26 MAR 15:17Z
    Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via Port 22/SSH…
    cvelistv5