Approved changes feed: RSS · Atom

cpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:8.0:*:*:*:*:*:*:*

part: o version: 8.0 update: *

VendorBaxter (a179c94a-1aed-5d11-8395-fe3753820594)
ProductSigma Spectrum Infusion System Firmware (36ab6c10-ae6d-5f1d-a6f6-70cf9def9a6b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12047 vulnerable 2026-06-03 14:41:33.199399 Details available
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FTP service with hard-coded credentials.
Published: 2020-06-29T13:41:37.000Z
Updated: 2024-08-04T11:48:57.938Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12045 vulnerable 2026-06-03 14:41:33.198666 Details available
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet service on Port 1023 with hard-coded credentials.
Published: 2020-06-29T13:43:40.000Z
Updated: 2024-08-04T11:48:58.009Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12043 vulnerable 2026-06-03 14:41:33.198206 Details available
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted.
Published: 2020-06-29T13:41:42.000Z
Updated: 2024-08-04T11:48:57.976Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12041 vulnerable 2026-06-03 14:41:33.192416 Details available
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configuration changes to network settings of the WBM, and allows the WBM to be rebooted. Temporary configuration changes to network settings are removed upon reboot.
Published: 2020-06-29T13:43:52.000Z
Updated: 2024-08-04T11:48:57.710Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12040 vulnerable 2026-06-03 14:41:33.192046 Details available
Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has circumvented network security measures to view sensitive non-private data or to perform a man-in-the-middle attack.
Published: 2020-06-29T13:45:58.000Z
Updated: 2024-08-04T11:48:57.530Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12039 vulnerable 2026-06-03 14:41:33.190918 Details available
Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration values, network configuration of Sigma Spectrum WBM if installed.
Published: 2020-06-29T13:45:48.000Z
Updated: 2024-08-04T11:48:58.109Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.