CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
59.6%
The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FTP service with hard-coded credentials.
Vendor | Product | Version | CPE |
---|---|---|---|
baxter | sigma_spectrum_infusion_system_firmware | 8.0 | cpe:2.3:o:baxter:sigma_spectrum_infusion_system_firmware:8.0:*:*:*:*:*:*:* |
baxter | sigma_spectrum_infusion_system | - | cpe:2.3:h:baxter:sigma_spectrum_infusion_system:-:*:*:*:*:*:*:* |
baxter | wireless_battery_module | 17 | cpe:2.3:h:baxter:wireless_battery_module:17:*:*:*:*:*:*:* |
baxter | wireless_battery_module | 20d29 | cpe:2.3:h:baxter:wireless_battery_module:20d29:*:*:*:*:*:*:* |
baxter | wireless_battery_module | 20d30 | cpe:2.3:h:baxter:wireless_battery_module:20d30:*:*:*:*:*:*:* |
baxter | wireless_battery_module | 20d31 | cpe:2.3:h:baxter:wireless_battery_module:20d31:*:*:*:*:*:*:* |
baxter | wireless_battery_module | 22d24 | cpe:2.3:h:baxter:wireless_battery_module:22d24:*:*:*:*:*:*:* |
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
Percentile
59.6%