Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Hospira Component: Mednet Clear all filters
TI-2014-04403 CVE-2014-5401 · GHSA-8845-p3hj-8543

Hospira MedNet Code Injection

Priority MEDIUM 50

Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.05009 Published 2019-03-26 Fixed in 6.1 CWE-94
TI-2014-04405 CVE-2014-5405 · GHSA-m3j7-7x7f-j7pf

Hospira MedNet Use of Hard-coded Password

Priority MEDIUM 43

Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password…

CVSS 2.0CRITICAL 9.0 Network Low privileges Interaction — EPSS 0.02327 Published 2015-04-03 Fixed in 6.1 CWE-259
TI-2014-04404 CVE-2014-5403 · GHSA-7fj9-wg8v-v4f2

Hospira MedNet Use of Hard-coded Cryptographic Key

Priority LOW 34

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

CVSS 2.0MEDIUM 6.8 Network Low privileges Interaction — EPSS 0.01744 Published 2015-04-03 Fixed in 6.1 CWE-321
TI-2014-04402 CVE-2014-5400 · GHSA-cxhq-365x-27h7

Hospira MedNet Password in Configuration File

Priority LOW 30

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.

CVSS 2.0MEDIUM 6.8 Local Low privileges Interaction — EPSS 0.00329 Published 2015-04-03 Fixed in 6.1 CWE-260