Vulnerabilities > Baxter > Sigma Spectrum Infusion System Firmware > Low

DATE CVE VULNERABILITY TITLE RISK
2020-06-29 CVE-2020-12039 Use of Hard-coded Credentials vulnerability in Baxter Sigma Spectrum Infusion System Firmware 6.0/6.05/8.0
Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration values, network configuration of Sigma Spectrum WBM if installed.
local
low complexity
baxter CWE-798
2.1