CVE-2014-5406

🗓️ 06 Jul 2015 19:10:00Reported by icscertType

The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a drug library, software update, or configuration change, allowing remote attackers to modify settings or medication data via packets on various ports

Reporter	Title	Published	Views	Family All 6
CNVD	Hospira LifeCare PCA Infusion System Security Restriction Bypass Vulnerability	19 May 201500:00	–	cnvd
Cvelist	CVE-2014-5406 Hospira LifeCare PCA Infusion System	6 Jul 201519:10	–	cvelist
EUVD	EUVD-2014-5294	7 Oct 202500:30	–	euvd
ICS	Hospira LifeCare PCA Infusion System Vulnerabilities (Update A)	23 Aug 201812:00	–	ics
NVD	CVE-2014-5406	6 Jul 201519:59	–	nvd
Prion	Design/Logic Flaw	6 Jul 201519:59	–	prion

NVD

Vulners

Node

hospira lifecare_pcainfusion_firmwareRange≤5.0

AND

hospira lifecare_pca3Match-

hospira lifecare_pca5Match-

[
  {
    "defaultStatus": "unaffected",
    "product": "LifeCare PCA Infusion System",
    "vendor": "Hospira",
    "versions": [
      {
        "lessThanOrEqual": "5.0",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "status": "unaffected",
        "version": "7.0"
      }
    ]
  }
]

Source	Link
xs-sniper	www.xs-sniper.com/blog/2015/06/08/hospira-plum-a-infusion-pump-vulnerabilities/
fda	www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm
github	www.github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-125-01.json
cisa	www.cisa.gov/news-events/ics-advisories/icsa-15-125-01
ics-cert	www.ics-cert.us-cert.gov/advisories/ICSA-15-125-01

06 May 2026 22:30Current

6.6Medium risk

Vulners AI Score6.6

CVSS 27.6 - 9.3

EPSS0.0055

CWE-345