title: Format String vulnerability
description: The Baxter Spectrum WBM (v16, v16D38) and Baxter Spectrum WBM (v17, v17D19, v20D29 to v20D32) when in superuser mode is susceptible to format string attacks via application messaging. An attacker could use this to read memory in the WBM to access sensitive information.
problem types: CWE-134 Use of Externally-Controlled Format String
affected:
{
product: Baxter Spectrum Wireless Battery Module (WBM)
vendor: Baxter
versions:
status: affected, version: 16
status: affected, version: 16D38
status: affected, version: 17
status: affected, version: 17D19
status: affected, version: 20D29
status: affected, version: 20D30
status: affected, version: 20D31
status: affected, version: 20D32
}
metrics:
cvssV3_1: [
attackComplexity: HIGH
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 3.1
baseSeverity: LOW
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N
version: 3.1
]