CVE-2020-12045CWE-259

The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet…

published June 29, 2020

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

🚨 A Telnet service running on Port 1023 with hard-coded credentials makes this device a sitting duck! Think of it like leaving the front door of your house wide open with a big sign saying, "Come on in!"—not exactly the best idea, right? An attacker could stroll right into the system using those hard-coded credentials, gaining access to sensitive functionalities. This could lead to unauthorized control of the device, compromising system integrity and putting patient safety at risk. That's absolutely devastating!

Put simply

Think of it like leaving the front door of your house wide open with a big sign saying, "Come on in!"—not exactly the best idea, right? This vulnerability affects the Baxter Spectrum WBM models by enabling an unsecured Telnet service with hard-coded credentials, making it easy for attackers to connect and exploit the system without any authentication hurdles.

What to do

An attacker could stroll right into the system using those hard-coded credentials, gaining access to sensitive functionalities. This could lead to unauthorized control of the device, compromising system integrity and putting patient safety at risk. That's absolutely devastating! Disable the Telnet service immediately if it's not needed, and update your device firmware to the latest version that patches this vulnerability. Additionally, consider implementing more secure remote management practices. You've got this! Follow these steps, and you'll secure your system in no time. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01676 · 76.7th percentile
Weakness
CWE-259 · Use of Hard-coded Password
Published
2020-06-29T13:43Z
EPSS history
Timeline
  • 29 JUN 13:43Z
    The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24) when used in conjunction with a Baxter Spectrum v8.x (model 35700BAX2), operates a Telnet…
    cvelistv5