Vulnerability index

Browse CVEs

9 matching
Filters 1 Clear all
Severity

Filters apply as you choose them.

Mednet CRITICAL 9.8
CVE-2014-5401EPSS 5%

Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthent…

Fix: after 5.8
Fix from $2,300 2019-03-26
Communication Engine HIGH 7.3
CVE-2015-7909

Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and …

Fix: after 1.0
Fix from $1,950 2016-01-22
Lifecare Pcainfusion Firmware HIGH 7.8
CVE-2015-3958

Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (forced manua…

Fix: after 5.0
Fix from $1,950 2015-07-06
Lifecare Pcainfusion Firmware HIGH 10.0
CVE-2015-3955EPSS 7%

Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute …

Fix: after 5.0
Fix from $1,950 2015-07-06
Lifecare Pcainfusion Firmware MEDIUM 5.0
CVE-2015-1011

Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecifie…

Fix: after 5.0
Fix from $1,600 2015-07-06
Lifecare Pcainfusion Firmware HIGH 9.3
CVE-2014-5406

The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update…

Fix: after 5.0
Fix from $1,950 2015-07-06
Lifecare Pcainfusion Firmware HIGH 10.0
CVE-2015-3459EPSS 5%

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allow…

Fix: after 5.0
Fix from $1,950 2015-04-29
Mednet HIGH 9.0
CVE-2014-5405

Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypas…

Fix: after 5.8
Fix from $1,950 2015-04-03
Mednet MEDIUM 5.0
CVE-2014-5403

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to…

Fix: after 5.8
Fix from $1,600 2015-04-03