CVE-2020-12041

9.4 criticalEPSS 1.4%

Critical (9.4) in baxter sigma spectrum infusion system firmware. EPSS 1.4% chance of exploitation in the next 30 days.

The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) telnet Command-Line Interface, grants access to sensitive data stored on the WBM that permits temporary configuration changes to network settings of the WBM, and allows the WBM to be rebooted. Temporary configuration changes to network settings are removed upon reboot.

Severity

CVSS 3.1

9.4 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H

EPSS: 1.4% chance of exploitation in the next 30 days; higher than 72% of CVEs (scores of 2026-10-31)
CWE: CWE-732
Published: 2020-06-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

baxter:sigma_spectrum_infusion_system_firmware

References

https://www.us-cert.gov/ics/advisories/icsma-20-170-04
https://www.us-cert.gov/ics/advisories/icsma-20-170-04

Check your stack JSON