CVE-2022-26390

Name of the Vulnerable Software and Affected Versions Baxter Spectrum Wireless Battery Module (WBM) (affected versions not specified)

Description The issue concerns the storage of network credentials and Protected Health Information (PHI) in unencrypted form, specifically applicable to Spectrum IQ pumps using auto programming. An attacker with physical access to a device that hasn't had all data and settings erased may be able to extract sensitive information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.