Baxter Sigma Spectrum Infusion System Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Baxter Sigma Spectrum Infusion System Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (10)

• CVE-2020-12047 — CVSS 9.8 (critical): The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a…
• CVE-2014-5432 — CVSS 9.8 (critical): Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 is remotely accessible…
• CVE-2014-5433 — CVSS 9.8 (critical): An unauthenticated remote attacker may be able to execute commands to view wireless account credentials that are stored in cleartext on…
• CVE-2014-5434 — CVSS 9.8 (critical): Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 has a default account…
• CVE-2020-12040 — CVSS 9.8 (critical): Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the…
• CVE-2020-12043 — CVSS 9.8 (critical): The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the…
• CVE-2020-12045 — CVSS 9.8 (critical): The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2)…
• CVE-2020-12041 — CVSS 9.4 (critical): The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on…
• CVE-2014-5431 — CVSS 6.8 (medium): Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module (WBM) version 16 contains a hard-coded…
• CVE-2020-12039 — CVSS 2.4 (low): Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model…