Read the docs

Hospira

Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical8CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

Hospira records in CISA KEV

No Hospira vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Lifecare Pcainfusion Firmware 6 records MEDIUM Mednet 4 records MEDIUM Lifecare Pca3 2 records MEDIUM Lifecare Pca5 2 records MEDIUM Communication Engine 1 record LOW Lifecare Pca Infusion System 1 record LOW

Records

4 records in Mednet · all components

TI-2014-04403 CVE-2014-5401 · GHSA-8845-p3hj-8543

Hospira MedNet Code Injection

Priority MEDIUM 50

Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05009 Published 2019-03-26 Fixed in 6.1 CWE-94
TI-2014-04405 CVE-2014-5405 · GHSA-m3j7-7x7f-j7pf

Hospira MedNet Use of Hard-coded Password

Priority MEDIUM 43

Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password…

CVSS 2.0CRITICAL 9.0 Network Low privileges Interaction — EPSS 0.02327 Published 2015-04-03 Fixed in 6.1 CWE-259
TI-2014-04404 CVE-2014-5403 · GHSA-7fj9-wg8v-v4f2

Hospira MedNet Use of Hard-coded Cryptographic Key

Priority LOW 34

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.01744 Published 2015-04-03 Fixed in 6.1 CWE-321
TI-2014-04402 CVE-2014-5400 · GHSA-cxhq-365x-27h7

Hospira MedNet Password in Configuration File

Priority LOW 30

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.00329 Published 2015-04-03 Fixed in 6.1 CWE-260
Open these records in search →