CVE-2022-26394

Unauthenticated network reconfiguration via TCP/UDP

Severity Score

5.4

*CVSS v3.1

Exploit Likelihood

*EPSS

Affected Versions

*CPE

Public Exploits

*Multiple Sources

Exploited in Wild

*KEV

Decision

*SSVC

Descriptions

The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail.

Baxter Spectrum WBM no lleva a cabo una autenticación mutua con el host del servidor de la pasarela. Esto puede permitir a un atacante llevar a cabo un ataque de hombre en el medio que modifique los parámetros haciendo que la conexión de red falle

*Credits: N/A

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Attack Vector

Adjacent

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

Low

Integrity

Low

Availability

Low

* Common Vulnerability Scoring System

SSVC

Decision:-

Exploitation

Automatable

Tech. Impact

* Organization's Worst-case Scenario

Timeline

2022-03-03 CVE Reserved
2022-09-09 CVE Published
2024-03-31 EPSS Updated
2024-09-16 CVE Updated
---------- Exploited in Wild
---------- KEV Due Date
---------- First Exploit

CWE

CWE-306: Missing Authentication for Critical Function

CAPEC

References (2)

URL	Tag	Source
https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01	Third Party Advisory
https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx	Broken Link

URL	Date	SRC

URL	Date	SRC

URL	Date	SRC

Affected Vendors, Products, and Versions

Vendor		Product				Version		Other		Status
Vendor	Product	Version	Other	Status	<-- -->	Vendor	Product	Version	Other	Status
Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Firmware Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware"	>= 20d29 <= 20d32 Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware" and version " >= 20d29 <= 20d32"	-	Affected	in	Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Search vendor "Baxter" for product "Spectrum Wireless Battery Module"	-	-	Safe
Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Firmware Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware"	16 Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware" and version "16"	-	Affected	in	Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Search vendor "Baxter" for product "Spectrum Wireless Battery Module"	-	-	Safe
Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Firmware Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware"	16d38 Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware" and version "16d38"	-	Affected	in	Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Search vendor "Baxter" for product "Spectrum Wireless Battery Module"	-	-	Safe
Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Firmware Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware"	17 Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware" and version "17"	-	Affected	in	Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Search vendor "Baxter" for product "Spectrum Wireless Battery Module"	-	-	Safe
Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Firmware Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware"	17d19 Search vendor "Baxter" for product "Spectrum Wireless Battery Module Firmware" and version "17d19"	-	Affected	in	Baxter Search vendor "Baxter"	Spectrum Wireless Battery Module Search vendor "Baxter" for product "Spectrum Wireless Battery Module"	-	-	Safe
Baxter Search vendor "Baxter"	Sigma Spectrum 35700bax Firmware Search vendor "Baxter" for product "Sigma Spectrum 35700bax Firmware"	-	-	Affected	in	Baxter Search vendor "Baxter"	Sigma Spectrum 35700bax Search vendor "Baxter" for product "Sigma Spectrum 35700bax"	-	-	Safe
Baxter Search vendor "Baxter"	Sigma Spectrum 35700bax2 Firmware Search vendor "Baxter" for product "Sigma Spectrum 35700bax2 Firmware"	-	-	Affected	in	Baxter Search vendor "Baxter"	Sigma Spectrum 35700bax2 Search vendor "Baxter" for product "Sigma Spectrum 35700bax2"	-	-	Safe
Baxter Search vendor "Baxter"	Baxter Spectrum Iq 35700bax3 Firmware Search vendor "Baxter" for product "Baxter Spectrum Iq 35700bax3 Firmware"	-	-	Affected	in	Baxter Search vendor "Baxter"	Baxter Spectrum Iq 35700bax3 Search vendor "Baxter" for product "Baxter Spectrum Iq 35700bax3"	-	-	Safe