ID CVE-2020-12043
Summary The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when configured for wireless networking the FTP service operating on the WBM remains operational until the WBM is rebooted.
References
Vulnerable Configurations
  • cpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:8.0:*:*:*:*:*:*:*
    cpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:8.0:*:*:*:*:*:*:*
  • cpe:2.3:h:baxter:sigma_spectrum_infusion_system:-:*:*:*:*:*:*:*
    cpe:2.3:h:baxter:sigma_spectrum_infusion_system:-:*:*:*:*:*:*:*
  • cpe:2.3:h:baxter:wireless_battery_module:17:*:*:*:*:*:*:*
    cpe:2.3:h:baxter:wireless_battery_module:17:*:*:*:*:*:*:*
  • cpe:2.3:h:baxter:wireless_battery_module:20d29:*:*:*:*:*:*:*
    cpe:2.3:h:baxter:wireless_battery_module:20d29:*:*:*:*:*:*:*
  • cpe:2.3:h:baxter:wireless_battery_module:20d30:*:*:*:*:*:*:*
    cpe:2.3:h:baxter:wireless_battery_module:20d30:*:*:*:*:*:*:*
  • cpe:2.3:h:baxter:wireless_battery_module:20d31:*:*:*:*:*:*:*
    cpe:2.3:h:baxter:wireless_battery_module:20d31:*:*:*:*:*:*:*
  • cpe:2.3:h:baxter:wireless_battery_module:22d24:*:*:*:*:*:*:*
    cpe:2.3:h:baxter:wireless_battery_module:22d24:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 08-07-2020 - 14:54)
Impact:
Exploitability:
CWE CWE-672
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
misc https://www.us-cert.gov/ics/advisories/icsma-20-170-04
Last major update 08-07-2020 - 14:54
Published 29-06-2020 - 14:15
Last modified 08-07-2020 - 14:54
Back to Top