CVE-2020-12047
highPriorität · verfolgen · 40OT-Risiko · erhöhtEPSS 0.017 · 77. PerzentilEUUSEPSS · bewertet 2026-10-27
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FTP service with hard-coded credentials.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenBaxter Spectrumcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- BehobenBaxter Spectrum LVPcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- BehobenSigma Spectrumcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- BehobenSigma Spectrum LVPcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · high–critical · 7.3–9.8
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
betroffene Produkte (13)
Betroffene Produkte und Versionsbereiche.
- Baxter Baxter Spectrum LVP≤ v8.x (with Wireless Battery Modules v17 | v17D19 | >= v20D29 | <= v20D32 | >= v22D24 | <= v22D28)cisa_csaf_otUS
- Baxter Sigma Spectrum LVP≤ v6.x (with Wireless Battery Modules v9 | v11 | v13 | v14 | v15 | v16 | v16D38 | v17 | v17D19 | >= v20D29 | <= v20D32 | >= v22D24 | <= v22D28)cisa_csaf_otUS
- n/a Baxter Sigma Spectrum Infusion Pumps≤ Sigma Spectrum v6.x model 35700BAX,Spectrum v8.x model 35700BAX2,Sigma Spectrum v6.x with Wireless Battery Module (WBM) v9,v11,v13,v14,v15,v16,v20D29,v20D30,v20D31,v22D24, Spectrum v8.x w/WBM v17,v20D29,v20D30,v20D31,v22D24,Spectrum WBM v17,v20D29,v20D30,v20D31,v22D24,Spectrum LVP v8.x with WBM v17, v20D29,v20D30,v20D31,and v22D24enisa_euvdEU
- baxter sigma spectrum infusion system firmware= 8.0nvdUScpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:*:*:*:*:*:*:*:*
Advisories (1)
Hersteller- und Ökosystem-Meldungen dazu.
- ICSMA-20-170-04Baxter Sigma Spectrum Infusion Pumps (Update B)2020-06-18icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could result in access to sensitive data, alteration of system configuration, and impact to system availability.
auch bekannt als (3)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (6)
Externe Belege — Patches, Meldungen, Analysen.
- http://www.nsfocus.net/vulndb/47298cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-12047cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.2149/cnnvd
- https://www.us-cert.gov/ics/advisories/icsma-20-170-04cnnvd
- https://www.us-cert.gov/ics/advisories/icsma-20-170-04enisa_euvd
- https://www.us-cert.gov/ics/advisories/icsma-20-170-04Third Party AdvisoryUS Government Resourcenvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan