CVEvulnerability

CVE-2022-26392

6.5 MEDIUM Published 2022-09-09 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-09-09
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
3.1 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-134

Description

The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information.

Affected configurations

• baxter spectrum wireless battery module firmware (>= 20d29 <= 20d32) • baxter spectrum wireless battery module firmware 16 • baxter spectrum wireless battery module firmware 16d38 • baxter spectrum wireless battery module firmware 17 • baxter spectrum wireless battery module firmware 17d19 • baxter sigma spectrum 35700bax firmware • baxter sigma spectrum 35700bax2 firmware • baxter baxter spectrum iq 35700bax3 firmware

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References