What’s Vulnerable › Vulnerabilities

CVE-2022-26393: Format String vulnerability

• Severity: high (CVSS 8.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-09-09 · updated 2026-06-17
• Weakness: CWE-134

Description

The Baxter Spectrum WBM is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information or cause a Denial of Service (DoS) on the WBM.

Affected products

• Baxter Spectrum Iq 35700Bax3 Firmware: all versions
• Baxter Sigma Spectrum 35700Bax2 Firmware: all versions
• Baxter Sigma Spectrum 35700Bax Firmware: all versions
• Baxter Spectrum Wireless Battery Module Firmware: 20d29

References

• https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx
• https://www.cisa.gov/uscert/ics/advisories/icsma-22-251-01
• https://www.us-cert.gov/ics/advisories/icsma-22-xxx-xx

Get alerted when CVE-2022-26393 or the next vulnerability affects your stack