https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T15:03:19.691366+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2021-21077 cnvd-2021-21077 2026-10-04T15:03:19.760382+00:00 cnvd-2021-21077 https://cve.radiocsirt.org/vuln/euvd-2026-41046 EUVD-2026-41046 2026-10-04T15:03:19.760421+00:00 EUVD-2026-41046 https://cve.radiocsirt.org/vuln/fkie_cve-2020-12047 fkie_cve-2020-12047 2026-10-04T15:03:19.760435+00:00

The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FTP service with hard-coded credentials.

 https://cve.radiocsirt.org/vuln/ghsa-j5f9-r6jx-6c24 GHSA-j5f9-r6jx-6c24 2026-10-04T15:03:19.760464+00:00

The Baxter Spectrum WBM (v17, v20D29, v20D30, v20D31, and v22D24), when used with a Baxter Spectrum v8.x (model 35700BAX2) in a factory-default wireless configuration enables an FTP service with hard-coded credentials.

 https://cve.radiocsirt.org/vuln/gsd-2020-12047 gsd-2020-12047 2026-10-04T15:03:19.760480+00:00 gsd-2020-12047 https://cve.radiocsirt.org/vuln/icsma-20-170-04 ICSMA-20-170-04 — Baxter Sigma Spectrum Infusion Pumps (Update B) 2026-10-04T15:03:19.760490+00:00

Sigma Spectrum Infusion System Version(s) 6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) contain hard-coded passwords which, when physically entered on the keypad, provide access to biomedical menus that include device settings, view of calibration values, and network configuration of the Sigma Spectrum Wireless Battery Module (WBM) if installed. CVE-2020-12039 has been assigned to this vulnerability. A CVSS v3 base score of 4.3 has been calculated; the CVSS vector string is (AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). Sigma Spectrum Infusion System Version(s) 6.x (model 35700BAX) and Baxter Spectrum Infusion System Version(s) 8.x (model 35700BAX2) at the application layer uses an unauthenticated clear-text communication channel to send and receive system status and operational data. This could allow an attacker that has circumvented network security measures to view sensitive non-private data or to perform a man-in-the-middle attack. CVE-2020-12040 has been assigned to this vulnerability. A CVSS v3 base score of 7.3 has been calculated; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L). The Baxter Spectrum WBM (v9, v11, v13, v14, v15, v16, v16D38, v17, v17D19, v20D29 to v20D32, and v22D19 to v22D28) operates a Telnet service with hard-coded credentials when connected to specific SSIDs. CVE-2020-12045 has been assigned to this vulnerability. A CVSS v3 base score of 8.6 has been calculated; the CVSS vector string is (AV:N/AC:…