CVE-2014-5433
published 2019-03-26CVE-2014-5433: An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum…
PriorityP263critical9.8CVSS 3.0
AVNACLPRNUINSUCHIHAH
EPSS
2.06%
79.0th percentile
An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16, which may allow an attacker to gain access the host network. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| baxter | sigma_spectrum_infusion_system | — | — |
| baxter | sigma_spectrum_infusion_system_firmware | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →Monitor for unauthenticated SSH (Port 22) connections to Baxter SIGMA Spectrum WBM devices; any SSH session established without prior authentication is indicative of CVE-2014-5432/CVE-2014-5433 exploitation. ↗
- →Alert on commands issued over unauthenticated SSH sessions to the WBM that retrieve or display wireless credentials or shared keys in cleartext. ↗
- →Detect FTP connections (Port 21) to Baxter SIGMA Spectrum WBM devices, which expose a hard-coded credential account. ↗
- ·CVE-2014-5433 specifically affects SIGMA Spectrum Infusion System Version 6.05 (model 35700BAX) with WBM Version 16 only; Version 8 hardware/software removes the SSH service and masks credential output, eliminating the remote attack surface. ↗
CVSS provenance
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-q82h-476f-85p3: An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA S
ghsa_unreviewed·2022-05-13
CVE-2014-5433 [CRITICAL] GHSA-q82h-476f-85p3: An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA S
An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16, which may allow an attacker to gain access the host network. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8, which incorporates hardware and software changes.
CISA ICS
Baxter SIGMA Spectrum Infusion System Vulnerabilities
cisa_ics·2015-09-29
Baxter SIGMA Spectrum Infusion System Vulnerabilities
## Archived Content In an effort to keep CISA.gov current, the archive contains outdated information that may not reflect current policy or programs.
ICS Advisory
##
Baxter SIGMA Spectrum Infusion System Vulnerabilities
Last RevisedSeptember 29, 2015
Alert CodeICSA-15-181-01
## OVERVIEW
This advisory was originally posted to the US-CERT secure Portal library on June 30, 2015, and is being released to the NCCIC/ICS-CERT web site.
Researcher Jared Bird with Allina IS Security identified four vulnerabilities in Baxter’s SIGMA Spectrum Infusion System. Baxter has released a new version of the SIGMA Spectrum Infusion System, Version 8 that incorporates hardware and software changes, which do not contain three of the four identified vulnerabiliti
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2019-03-26
Published