VULNERABILITY INTELLIGENCE

CVE-2020-12039

CVSS score2.4 LOW

EPSS probability0.35%

CISA KEVNot currently listed

Published2020-06-29

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration values, network configuration of Sigma Spectrum WBM if installed.

Weakness classification

CWE-259: Use of Hard-coded Password
CWE-798: Use of Hard-coded Credentials

Primary references

ics-cert@hq.dhs.gov — Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource