CVE-2014-5434

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol. Baxter asserts no files can be transferred to or from the WBM using this account. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.
References
Link Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01 Mitigation Third Party Advisory US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01 Mitigation Third Party Advisory US Government Resource
Configurations

Configuration 1 (hide)

AND
cpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:6.05:*:*:*:*:*:*:*
OR cpe:2.3:h:baxter:sigma_spectrum_infusion_system:-:*:*:*:*:*:*:*
cpe:2.3:h:baxter:wireless_battery_module:16:*:*:*:*:*:*:*

History

21 Nov 2024, 02:12

Type Values Removed Values Added
References () https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01 - Mitigation, US Government Resource, Third Party Advisory () https://ics-cert.us-cert.gov/advisories/ICSA-15-181-01 - Mitigation, Third Party Advisory, US Government Resource

Information

Published : 2019-03-26 15:29

Updated : 2024-11-21 02:12


NVD link : CVE-2014-5434

Mitre link : CVE-2014-5434

CVE.ORG link : CVE-2014-5434


JSON object : View

Products Affected

baxter

  • wireless_battery_module
  • sigma_spectrum_infusion_system
  • sigma_spectrum_infusion_system_firmware
CWE
CWE-259

Use of Hard-coded Password

CWE-798

Use of Hard-coded Credentials