Vulnerability in Baxter Sigma_spectrum_infusion_system

CVE-2020-12039

Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedic…

EPSS: 0.003 (25.6th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 2.4 (Low). Vector: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

  • Baxter Sigma_spectrum_infusion_system
  • Baxter Sigma_spectrum_infusion_system_firmware — versions 8.0
  • N/a Baxter Sigma Spectrum Infusion Pumps — versions Sigma Spectrum v6.x model 35700BAX,Spectrum v8.x model 35700BAX2,Sigma Spectrum v6.x with Wireless Battery Module (WBM) v9,v11,v13,v14,v15,v16,v20D29,v20D30,v20D31,v22D24, Spectrum v8.x w/WBM v17,v20D29,v20D30,v20D31,v22D24,Spectrum WBM v17,v20D29,v20D30,v20D31,v22D24,Spectrum LVP v8.x with WBM v17, v20D29,v20D30,v20D31,and v22D24

Weakness classification (CWE)

References

Frequently asked questions

What is CVE-2020-12039?
CVE-2020-12039 is a low-severity vulnerability in Baxter Sigma_spectrum_infusion_system, classified under Use of Hard-coded Password. CVSS score: 2.4/10. Published 2020-06-29.
How severe is CVE-2020-12039?
Low severity. CVSS v3 base score is 2.4 out of 10.