CVE-2022-26394

CVE-2022-26394 describes a medium-severity vulnerability in Baxter Spectrum and Sigma Spectrum infusion pumps, specifically within the Wireless Battery Module (WBM). The flaw stems from a lack of mutual authentication between the WBM and the gateway server, enabling a man-in-the-middle attack. This attack, which requires adjacent network access and low complexity, could allow an attacker to modify parameters, disrupting network connectivity and potentially impacting device functionality. While not actively exploited (no KEV entry) and lacking public exploit code, the vulnerability has garnered some community discussion and media coverage.