Browse CVEs

CRITICAL 9.8 CVE-2014-5401EPSS 5% Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthent… Mednet after 5.8 Fix from $2,3002019-03-26 HIGH 7.3 CVE-2015-7909 Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and … Communication Engine after 1.0 Fix from $1,9502016-01-22 HIGH 7.8 CVE-2015-3958 Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (forced manua… Lifecare Pcainfusion Firmware after 5.0 Fix from $1,9502015-07-06 HIGH 10.0 CVE-2015-3955EPSS 7% Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute … Lifecare Pcainfusion Firmware after 5.0 Fix from $1,9502015-07-06 MEDIUM 5.0 CVE-2015-1011 Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecifie… Lifecare Pcainfusion Firmware after 5.0 Fix from $1,6002015-07-06 HIGH 9.3 CVE-2014-5406 The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update… Lifecare Pcainfusion Firmware after 5.0 Fix from $1,9502015-07-06 HIGH 10.0 CVE-2015-3459EPSS 5% The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allow… Lifecare Pcainfusion Firmware after 5.0 Fix from $1,9502015-04-29 HIGH 9.0 CVE-2014-5405 Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypas… Mednet after 5.8 Fix from $1,9502015-04-03 MEDIUM 5.0 CVE-2014-5403 Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to… Mednet after 5.8 Fix from $1,6002015-04-03