CVE-2014-5434

Опубликовано: 26 мар. 2019

Источник: nvd

CVSS3: 9.8

CVSS2: 5

EPSS Низкий

Описание

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.

Ссылки

https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01
Mitigation
Third Party Advisory
US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01
Mitigation
Third Party Advisory
US Government Resource

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:6.05:*:*:*:*:*:*:*

Одно из

cpe:2.3:h:baxter:sigma_spectrum_infusion_system:-:*:*:*:*:*:*:*

cpe:2.3:h:baxter:wireless_battery_module:16:*:*:*:*:*:*:*

EPSS

Процентиль: 48%

0.00248

Низкий

9.8 Critical

CVSS3

5 Medium

CVSS2

Дефекты

CWE-259

CWE-798

Связанные уязвимости

GHSA-8j2v-wpmp-5j96