Lucene search

[email protected]CVE-2015-3957

HistoryJul 06, 2015 - 7:59 p.m.

CVE-2015-3957

2015-07-0619:59:03

CWE-255

[email protected]

web.nvd.nist.gov

hospira

lifecare

pca

infusion system

private keys

certificates

nvd

cve-2015-3957

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.2%

JSON

Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors.

Affected configurations

NVD

Node

hospiralifecare_pcainfusion_firmwareRange≤5.0

AND

hospiralifecare_pca3Match-

hospiralifecare_pca5Match-

CPENameOperatorVersion
hospira:lifecare_pcainfusion_firmwarehospira lifecare pcainfusion firmwarele5.0
hospira:lifecare_pca3hospira lifecare pca3eq-
hospira:lifecare_pca5hospira lifecare pca5eq-

CPE	Name	Operator	Version
hospira:lifecare_pcainfusion_firmware	hospira lifecare pcainfusion firmware	le	5.0
hospira:lifecare_pca3	hospira lifecare pca3	eq	-
hospira:lifecare_pca5	hospira lifecare pca5	eq	-

References

www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm

www.securityfocus.com/bid/75136

ics-cert.us-cert.gov/advisories/ICSA-15-125-01B

4.6 Medium

CVSS2

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

6.8 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

42.2%

JSON

Related for CVE-2015-3957

nvd1 cvelist1 prion1 ics2