Baxter Sigma Spectrum Infusion Pumps (Update B)
Successful exploitation of these vulnerabilities could result in access to sensitive data, alteration of system configuration, and impact to system availability.
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-12047US | critical9.8OT elevated | — | ||
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FT… | ||||
| CVE-2020-12045US | critical9.8OT elevated | — | ||
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet service on Port 1023 wit… | ||||
| CVE-2020-12043US | critical9.8 | — | ||
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is… | ||||
| CVE-2020-12041US | critical9.4 | — | ||
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configurat… | ||||
| CVE-2020-12040US | critical9.8OT elevated | — | ||
Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unauthenticated clear-t… | ||||
| CVE-2020-12039US | low2.4OT elevated | — | ||
Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when… | ||||
references
External citations — patches, advisories, analysis.
remediations (24)
- FixedBaxter Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum LVP
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan