CVE-2022-26392
Format String vulnerability
- State
- Published
- Severity
- 3.1 Low
- Published
- Sep 9, 2022
- Updated
- Sep 17, 2024
- Reserved
- Mar 3, 2022
Description
The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 3.1 Low | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N | Baxter |
Weaknesses
- CWE-134 Use of Externally-Controlled Format String
Affected Products
| Product | Versions |
|---|---|
Baxter Spectrum Wireless Battery Module (WBM)Baxter |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.