Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Priority MEDIUM 44

Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unau…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.00954 Published 2019-03-25 No fix listed CWE-345
Priority MEDIUM 46

Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02036 Published 2019-03-25 No fix listed CWE-285
Priority MEDIUM 46

Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01972 Published 2019-03-25 No fix listed CWE-259
Priority LOW 35

Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01008 Published 2019-03-25 No fix listed CWE-312