Insufficient verification of data authenticity in Hospira Plum A+ Infusion System
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- No fix listed
Attack profile from CVSS 3.0 · NVD. Fix status from CNA. Impact type from CWE-345.
Summary
Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host network. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Hospira | Plum A+ Infusion System | up to 13.4 | — | No fix listed | CNA |
| Hospira | Plum A+3 Infusion System | up to 13.6 | — | No fix listed | CNA |
| Hospira | Symbiq Infusion System | up to 3.13 | — | No fix listed | CNA |
- Plum A+ Infusion System VendorHospira Affected up to 13.4 Fixed in — No fix listed CNA
- Plum A+3 Infusion System VendorHospira Affected up to 13.6 Fixed in — No fix listed CNA
- Symbiq Infusion System VendorHospira Affected up to 3.13 Fixed in — No fix listed CNA
CPE configurations NVD · 6
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:pifzer:plum_a\+_infusion_system_firmware:*:*:*:*:*:*:*:* | up to 13.4 | Vulnerable | Pifzer |
| cpe:2.3:h:pifzer:plum_a\+_infusion_system:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pifzer |
| cpe:2.3:o:pifzer:plum_a\+3_infusion_system_firmware:*:*:*:*:*:*:*:* | up to 13.6 | Vulnerable | Pifzer |
| cpe:2.3:h:pifzer:plum_a\+3_infusion_system:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pifzer |
| cpe:2.3:o:pifzer:symbiq_infusion_system_firmware:*:*:*:*:*:*:*:* | up to 3.13 | Vulnerable | Pifzer |
| cpe:2.3:h:pifzer:symbiq_infusion_system:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Pifzer |
- cpe:2.3:o:pifzer:plum_a\+_infusion_system_firmware:*:*:*:*:*:*:*:* Versions up to 13.4 Vulnerable ·Pifzer
- cpe:2.3:h:pifzer:plum_a\+_infusion_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pifzer
- cpe:2.3:o:pifzer:plum_a\+3_infusion_system_firmware:*:*:*:*:*:*:*:* Versions up to 13.6 Vulnerable ·Pifzer
- cpe:2.3:h:pifzer:plum_a\+3_infusion_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pifzer
- cpe:2.3:o:pifzer:symbiq_infusion_system_firmware:*:*:*:*:*:*:*:* Versions up to 3.13 Vulnerable ·Pifzer
- cpe:2.3:h:pifzer:symbiq_infusion_system:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Pifzer
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2015-3956
- 2026-10-03 Alias added: GHSA-2vhp-v3rh-j2qr
References
More Hospira vulnerabilities
- TI-2015-03341 Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and… CVSS 2.0HIGH 10.0
- TI-2015-03050 The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not… CVSS 2.0HIGH 10.0
- TI-2014-04403 Hospira MedNet Code Injection CVSS 3.0CRITICAL 9.8
- TI-2015-03340 Improper authorization in Hospira Plum A+ Infusion System CVSS 3.0CRITICAL 9.8
- TI-2015-03339 Hard-coded credentials in Hospira Plum A+ Infusion System CVSS 3.0CRITICAL 9.8
- TI-2015-03351 Access control flaw in Hospira Symbiq Infusion System CVSS 3.0HIGH 8.8
Sources
- CVE-2015-3956 · CVE Program
- CVE-2015-3956 · NVD
- FIRST EPSS
- GHSA-2vhp-v3rh-j2qr · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences