CVE-2022-26390
Estado: ModificadaMedia (4.2)—
The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information.
CVSS
- Versión: 3.1
- Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
- Puntuación base: 4.2
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 0.47%
- Percentil entre todas las CVEs puntuadas: 39
- Fecha de la puntuación: 6/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (4)
CWE
- CWE-311
- CWE-312
Referencias
JSON original (NVD)
Mostrar
{
"id": "CVE-2022-26390",
"cveTags": [],
"metrics": {
"cvssMetricV31": [
{
"type": "Secondary",
"source": "productsecurity@baxter.com",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.2,
"attackVector": "PHYSICAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 0.5
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"scope": "UNCHANGED",
"version": "3.1",
"baseScore": 4.2,
"attackVector": "PHYSICAL",
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N",
"integrityImpact": "NONE",
"userInteraction": "NONE",
"attackComplexity": "HIGH",
"availabilityImpact": "NONE",
"privilegesRequired": "NONE",
"confidentialityImpact": "HIGH"
},
"impactScore": 3.6,
"exploitabilityScore": 0.5
}
]
},
"affected": [
{
"source": "productsecurity@baxter.com",
"affectedData": [
{
"vendor": "Baxter",
"product": "Baxter Spectrum Wireless Battery Module (WBM)",
"versions": [
{
"status": "affected",
"version": "16"
},
{
"status": "affected",
"version": "16D38"
},
{
"status": "affected",
"version": "17"
},
{
"status": "affected",
"version": "17D19"
},
{
"status": "affected",
"version": "20D29"
},
{
"status": "affected",
"version": "20D30"
},
{
"status": "affected",
"version": "20D31"
},
{
"status": "affected",
"version": "20D32"
},
{
"status": "affected",
"version": "22D19"
},
{
"status": "affected",
"version": "22D20"
},
{
"status": "affected",
"version": "22D21"
},
{
"status": "affected",
"version": "22D22"
},
{
"status": "affected",
"version": "22D23"
},
{
"status": "affected",
"version": "22D24"
},
{
"status": "affected",
"version": "22D25"
},
{
"status": "affected",
"version": "22D26"
},
{
"status": "affected",
"version": "22D27"
},
{
"status": "affected",
"version": "22D28"
}
]
}
]
}
],
"published": "2022-09-09T15:15:09.453",
"references": [
{
"url": "https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "productsecurity@baxter.com"
},
{
"url": "https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "nvd@nist.gov"
},
{
"url": "https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx",
"tags": [
"Third Party Advisory",
"US Government Resource"
],
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Secondary",
"source": "productsecurity@baxter.com",
"description": [
{
"lang": "en",
"value": "CWE-311"
}
]
},
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-312"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information."
},
{
"lang": "es",
"value": "El Módulo de Batería Inalámbrica (WBM) de Baxter Spectrum almacena credenciales de red y PHI (sólo aplicable a las bombas Spectrum IQ que usan programación automática) de forma no cifrada. Un atacante con acceso físico a un dispositivo al que no le han sido borrados todos los datos y configuraciones puede ser capaz de extraer información confidencial"
}
],
"lastModified": "2026-06-17T04:35:08.920",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "34DB00B2-DE3D-4D7B-9F03-35060096C37C",
"versionEndIncluding": "20d32",
"versionStartIncluding": "20d29"
},
{
"criteria": "cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "87121F24-64BD-4D6D-8467-5FBCCE0512C1",
"versionEndIncluding": "22d28",
"versionStartIncluding": "22d19"
},
{
"criteria": "cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:16:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "719496E8-9020-456F-8CCC-FDFE10CF2820"
},
{
"criteria": "cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:16d38:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "03DA9071-305A-4319-9807-1BD6F9EB8FDB"
},
{
"criteria": "cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:17:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4C68B374-58AD-4E71-9B83-3CA0241B8A4A"
},
{
"criteria": "cpe:2.3:o:baxter:spectrum_wireless_battery_module_firmware:17d19:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "85202DB1-56E1-43C6-81BC-C141862D72C0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:baxter:spectrum_wireless_battery_module:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "15E8AA9C-1024-482D-8636-551486698A8C"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:baxter:sigma_spectrum_35700bax_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1354B2D0-A259-4832-BB3D-BD9C157FB5C0"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:baxter:sigma_spectrum_35700bax:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "2EAFF022-6879-4734-9AEB-DE45E6E235DE"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:baxter:sigma_spectrum_35700bax2_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2715381-CA8F-416B-B9AD-9CDBDC181338"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:baxter:sigma_spectrum_35700bax2:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "576C9566-DA3F-43E8-B4E8-C5DEF3B06696"
}
],
"operator": "OR"
}
],
"operator": "AND"
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:baxter:baxter_spectrum_iq_35700bax3_firmware:-:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "89AFD13D-97D8-40A5-B36B-9B65229302B1"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:h:baxter:baxter_spectrum_iq_35700bax3:-:*:*:*:*:*:*:*",
"vulnerable": false,
"matchCriteriaId": "71D6364A-9707-4BB0-8808-AF3314026A79"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
],
"sourceIdentifier": "productsecurity@baxter.com"
}