CVE-2022-26394: Baxter Spectrum Iq 35700bax3 Firmware

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

The Baxter Spectrum WBM does not perform mutual authentication with the gateway server host. This may allow an attacker to perform a man in the middle attack that modifies parameters making the network connection fail.

Affected products

• Baxter Baxter Spectrum Iq 35700bax3 Firmware: affected versions not specified
• Baxter Sigma Spectrum 35700bax2 Firmware: affected versions not specified
• Baxter Sigma Spectrum 35700bax Firmware: affected versions not specified
• Baxter Spectrum Wireless Battery Module Firmware: from 20d29, up to and including 20d32; version 16 only; version 16d38 only; version 17 only; version 17d19 only

Published 2022-09-09. Last modified 2026-06-17.