CVE-2014-5434
Critical
Description
Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.
SeverityCritical
CVSS9.8
Exploit probability—
ProductBaxter Sigma Spectrum Infusion System Firmware
PublishedMar 26, 2019
First seenMar 26, 2019
Weakness typeCWE-259CWE-259
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| baxter sigma_spectrum_infusion_system_firmware | 6.05 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.