CVE-2022-26390CWE-311

Unencrypted internal storage of security credentials

Medium · published September 9, 2022

CVSS v3.1
4.2
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information.

The record
Technical detail
CVSS v3.1
4.2 · MEDIUM
Vector
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00474 · 40.0th percentile
Weakness
CWE-311 · Missing Encryption of Sensitive Data
Published
2022-09-09T14:40Z
EPSS history
Timeline
  • 09 SEP 14:40Z
    Unencrypted internal storage of security credentials
    cvelistv5