Read the docs

Baxter

Records37All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical23CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Baxter records in CISA KEV

No Baxter vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

10 records in Sigma Spectrum Infusion System Firmware · all components

Priority MEDIUM 47

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible via Port 22/SSH without authentication.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02573 Published 2019-03-26 No fix listed CWE-592
Priority MEDIUM 46

An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless ba…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02062 Published 2019-03-26 No fix listed CWE-312
Priority MEDIUM 45

The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FTP service with hard-coded credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01676 Published 2020-06-29 No fix listed CWE-259
Priority MEDIUM 45

The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet service on Port 1023 with hard-coded credentials.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01676 Published 2020-06-29 No fix listed CWE-259
Priority MEDIUM 45

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account with hard-coded credentials used with the FTP protocol.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.0156 Published 2019-03-26 No fix listed CWE-259
Priority MEDIUM 44

Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unauthenticated clear-text communication channel to send and re…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00948 Published 2020-06-29 No fix listed CWE-319
Priority MEDIUM 43

The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configuration changes to network settings of the W…

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.01406 Published 2020-06-29 No fix listed CWE-732
Priority LOW 30

Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 contains a hard-coded password, which provides access to basic biomedical information, limited device sett…

CVSS 3.0MEDIUM 6.8 Physical No auth No interaction EPSS 0.00378 Published 2019-03-26 No fix listed CWE-259
Priority LOW 12

Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide…

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.00348 Published 2020-06-29 No fix listed CWE-259
Open these records in search →