6.7 Medium
AI Score
Confidence
Low
0.022 Low
EPSS
Percentile
89.5%
The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands.
hextechsecurity.com/?p=123
imgur.com/CEAnZjj
imgur.com/JHiWSqd
www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm
www.securityfocus.com/bid/74414
ics-cert.us-cert.gov/advisories/ICSA-15-125-01
twitter.com/dyngnosis/status/592671049487142913
twitter.com/dyngnosis/status/592743461977219072