CVE-2022-26390 – Unencrypted internal storage of security credentials

https://notcve.org/view.php?id=CVE-2022-26390

The Baxter Spectrum Wireless Battery Module (WBM) stores network credentials and PHI (only applicable to Spectrum IQ pumps using auto programming) in unencrypted form. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information. El Módulo de Batería Inalámbrica (WBM) de Baxter Spectrum almacena credenciales de red y PHI (sólo aplicable a las bombas Spectrum IQ que usan programación automática) de forma no cifrada. Un atacante con acceso físico a un dispositivo al que no le han sido borrados todos los datos y configuraciones puede ser capaz de extraer información confidencial • https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01 https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx • CWE-311: Missing Encryption of Sensitive Data CWE-312: Cleartext Storage of Sensitive Information •