What is CVE-2014-5433?

CVE-2014-5433 is a critical-severity vulnerability in Baxter Sigma Spectrum Infusion System, classified under Cleartext Storage of Sensitive Information. CVSS score: 9.8/10. Published 2019-03-26.

How severe is CVE-2014-5433?

Critical severity. CVSS v3 base score is 9.8 out of 10.

Vulnerability in Baxter Sigma Spectrum Infusion System

CVE-2014-5433

An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM)…

EPSS: 0.021 (79.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Baxter Sigma Spectrum Infusion System — versions 6.05 (model 35700BAX) with wireless battery module (WBM) version 16
Baxter Sigma_spectrum_infusion_system
Baxter Sigma_spectrum_infusion_system_firmware — versions 6.05
Baxter Wireless_battery_module — versions 16

Weakness classification (CWE)

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC, Mitigation)

Frequently asked questions

What is CVE-2014-5433?: CVE-2014-5433 is a critical-severity vulnerability in Baxter Sigma Spectrum Infusion System, classified under Cleartext Storage of Sensitive Information. CVSS score: 9.8/10. Published 2019-03-26.
How severe is CVE-2014-5433?: Critical severity. CVSS v3 base score is 9.8 out of 10.