CVE-2020-12039: Baxter Sigma Spectrum Infusion System Firmware

Low severity, CVSS 2.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Baxter Sigma Spectrum Infusion Pumps Sigma Spectrum Infusion System v's6.x model 35700BAX & Baxter Spectrum Infusion System v's8.x model 35700BAX2 contain hardcoded passwords when physically entered on the keypad provide access to biomedical menus including device settings, view calibration values, network configuration of Sigma Spectrum WBM if installed.

Affected products

• Baxter Sigma Spectrum Infusion System Firmware: from 6.0, up to and including 6.05; version 8.0 only

Published 2020-06-29. Last modified 2026-06-17.