What’s Vulnerable › Vulnerabilities

CVE-2020-12040

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2020-06-29 · updated 2026-06-17
• Weakness: CWE-319

Description

Sigma Spectrum Infusion System v's6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has circumvented network security measures to view sensitive non-private data or to perform a man-in-the-middle attack.

Affected products

• Baxter Sigma Spectrum Infusion Pumps: from 6.0 through 6.05; 8.0

References

• https://www.us-cert.gov/ics/advisories/icsma-20-170-04
• https://www.us-cert.gov/ics/advisories/icsma-20-170-04

Get alerted when CVE-2020-12040 or the next vulnerability affects your stack