Read the docs

Hospira

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Hospira records in CISA KEV

No Hospira vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

6 records in Lifecare Pcainfusion Firmware · all components

Priority MEDIUM 51

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified com…

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.05064 Published 2015-04-29 No fix listed CWE-264
Priority MEDIUM 42

The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify…

CVSS 2.0HIGH 9.3 Network No auth Interaction — EPSS 0.01218 Published 2015-07-06 Fixed in 7.0 CWE-345
Open these records in search →