CVE-2014-5434

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.
References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01 Mitigation US Government Resource Third Party Advisory
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:6.05:*:*:*:*:*:*:*
OR cpe:2.3:h:baxter:sigma_spectrum_infusion_system:-:*:*:*:*:*:*:*
cpe:2.3:h:baxter:wireless_battery_module:16:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-03-26 15:29

Updated : 2024-02-28 17:08


NVD link : CVE-2014-5434

Mitre link : CVE-2014-5434

CVE.ORG link : CVE-2014-5434


JSON object : View

Products Affected

baxter

  • wireless_battery_module
  • sigma_spectrum_infusion_system_firmware
  • sigma_spectrum_infusion_system
CWE
CWE-798

Use of Hard-coded Credentials

CWE-259

Use of Hard-coded Password