CVE-2014-5434

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.56%

Published

Mar 26, 2019

Modified

Nov 20, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.

Weaknesses (CWE)

CWE-259CWE-798

Affected Products (3)

baxter · sigma_spectrum_infusion_system_firmwarevulnerable

baxter · sigma_spectrum_infusion_system

baxter · wireless_battery_module

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01

MitigationThird Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01

MitigationThird Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs