CVE-2020-12045
highpriority · track · 40OT risk · elevatedEPSS 0.017 · 77 %ileEUUSEPSS · scored 2026-10-27
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet service on Port 1023 with hard-coded credentials.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedBaxter Spectrumcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedBaxter Spectrum LVPcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrumcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
- FixedSigma Spectrum LVPcisa_csaf_ot
As a last resort, users may disable wireless operation of the pump. The Spectrum Infusion System was designed to operate without network access. This action would impact an organization 's ability to rapidly deploy drug library (formulary) updates to their pumps.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 7.5–9.8
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (13)
Products and version ranges known to be affected.
- Baxter Baxter Spectrum LVP≤ v8.x (with Wireless Battery Modules v17 | v17D19 | >= v20D29 | <= v20D32 | >= v22D24 | <= v22D28)cisa_csaf_otUS
- Baxter Sigma Spectrum LVP≤ v6.x (with Wireless Battery Modules v9 | v11 | v13 | v14 | v15 | v16 | v16D38 | v17 | v17D19 | >= v20D29 | <= v20D32 | >= v22D24 | <= v22D28)cisa_csaf_otUS
- n/a Baxter Sigma Spectrum Infusion Pumps≤ Sigma Spectrum v6.x model 35700BAX,Spectrum v8.x model 35700BAX2,Sigma Spectrum v6.x with Wireless Battery Module (WBM) v9,v11,v13,v14,v15,v16,v20D29,v20D30,v20D31,v22D24, Spectrum v8.x w/WBM v17,v20D29,v20D30,v20D31,v22D24,Spectrum WBM v17,v20D29,v20D30,v20D31,v22D24,Spectrum LVP v8.x with WBM v17, v20D29,v20D30,v20D31,and v22D24enisa_euvdEU
- baxter sigma spectrum infusion system firmware= 8.0nvdUScpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:*:*:*:*:*:*:*:*
advisories (1)
Vendor and ecosystem advisories describing this.
- ICSMA-20-170-04Baxter Sigma Spectrum Infusion Pumps (Update B)2020-06-18icsa · cisa_csaf_otUS
Successful exploitation of these vulnerabilities could result in access to sensitive data, alteration of system configuration, and impact to system availability.
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (6)
External citations — patches, advisories, analysis.
- http://www.nsfocus.net/vulndb/47316cnnvd
- https://nvd.nist.gov/vuln/detail/CVE-2020-12045cnnvd
- https://www.auscert.org.au/bulletins/ESB-2020.2149/cnnvd
- https://www.us-cert.gov/ics/advisories/icsma-20-170-04cnnvd
- https://www.us-cert.gov/ics/advisories/icsma-20-170-04enisa_euvd
- https://www.us-cert.gov/ics/advisories/icsma-20-170-04Third Party AdvisoryUS Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan