CVE-2020-12047

State: Published
Severity: Not scored
Published: Jun 29, 2020
Updated: Aug 4, 2024
Reserved: Apr 21, 2020

Description

The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FTP service with hard-coded credentials.

Scores

The record has no CVSS score.

Weaknesses

CWE-259 USE OF HARD-CODED PASSWORD CWE-259

Affected Products

Product	Versions
Baxter Sigma Spectrum Infusion Pumpsn/a	Sigma Spectrum v6.x model 35700BAX,Spectrum v8.x model 35700BAX2,Sigma Spectrum v6.x with Wireless Battery Module (WBM) v9,v11,v13,v14,v15,v16,v20D29,v20D30,v20D31,v22D24, Spectrum v8.x w/WBM v17,v20D29,v20D30,v20D31,v22D24,Spectrum WBM v17,v20D29,v20D30,v20D31,v22D24,Spectrum LVP v8.x with WBM v17, v20D29,v20D30,v20D31,and v22D24Affected

References

https://www.us-cert.gov/ics/advisories/icsma-20-170-04

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.