PT-2019-7130
CVE-2014-5434
·
Published
2019-03-26
·
Updated
2019-10-09
Description by
CVSS 2.0
5.0
MediumMetricsAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Baxter SIGMA Spectrum Infusion System version 6.05
Description
The issue concerns a default account with hard-coded credentials used in conjunction with the FTP protocol. It is specified that no files can be transferred to or from the wireless battery module using this account.
Recommendations
For Baxter SIGMA Spectrum Infusion System version 6.05, update to version 8, which incorporates necessary hardware and software changes to address the issue.
Found an issue in the description? Have something to add? Feel free to write us 👾