published June 29, 2020
⚠️ The Baxter Spectrum WBM's FTP service keeps the doors wide open until you reboot it — a techy version of a hotel where the concierge never locks up at night! 🔐 Imagine checking into a hotel that leaves its front door open all night. Guests can come and go freely — without ever having to check in! That’s what happens when the FTP service on these Baxter devices is left running post-configuration. This vulnerability allows unauthorized access to the FTP service, meaning bad actors could potentially browse, download, or manipulate files stored on the device. If left unchecked, this could lead to significant data breaches or unauthorized changes to important configurations — a scenario no organization wants to face.
Imagine checking into a hotel that leaves its front door open all night. Guests can come and go freely — without ever having to check in! That’s what happens when the FTP service on these Baxter devices is left running post-configuration. The Baxter Spectrum WBM (versions 17, v20D29, v20D30, v20D31, and v22D24) continues to run its FTP service even after wireless networking is configured, allowing users to access the device’s files without authentication until a reboot takes place.
This vulnerability allows unauthorized access to the FTP service, meaning bad actors could potentially browse, download, or manipulate files stored on the device. If left unchecked, this could lead to significant data breaches or unauthorized changes to important configurations — a scenario no organization wants to face. To secure your Baxter Spectrum WBM devices, ensure that the FTP service is disabled if not in use or reboot the device after making configuration changes. Regularly audit your devices to ensure that unnecessary services are not left running. Keeping firmware updated to the latest version can also help with security. You've got this! Taking action now will help keep your network safe and sound. 🛡️