CVE-2020-12047: Baxter Sigma Spectrum Infusion System Firmware

Critical severity, CVSS 9.8. EPSS: 1.7% chance of exploitation in the next 30 days.

The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FTP service with hard-coded credentials.

Affected products

• Baxter Sigma Spectrum Infusion System Firmware: version 8.0 only

Published 2020-06-29. Last modified 2026-06-17.