ICSMA-20-170-04

icsaUScisa_csaf_ot

Baxter Sigma Spectrum Infusion Pumps (Update B)

Advisory ansehen veröffentlicht 2020-06-18

Successful exploitation of these vulnerabilities could result in access to sensitive data, alteration of system configuration, and impact to system availability.

01

beschreibt (6)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2020-12047UScritical9.8OT erhöht—
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FT…
CVE-2020-12045UScritical9.8OT erhöht—
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet service on Port 1023 wit…
CVE-2020-12043UScritical9.8—
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is…
CVE-2020-12041UScritical9.4—
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configurat…
CVE-2020-12040UScritical9.8OT erhöht—
Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unauthenticated clear-t…
CVE-2020-12039USlow2.4OT erhöht—
Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (24)

  • BehobenBaxter Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenBaxter Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

  • BehobenSigma Spectrum LVP

    As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan