Lucene search
HistoryApr 29, 2015 - 11:59 p.m.
CVE-2015-3459
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.5%
The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands.
Affected configurations
Node
hospiralifecare_pcainfusion_firmwareRange≤5.0
hospiralifecare_pca3Match-
ORhospiralifecare_pca5Match-
References
Related
cve
cve
CVE-2015-3459
2015-04-29 23:59:00
CVE-2014-5406
2015-07-06 19:59:00
prion
prion
Authentication flaw
2015-04-29 23:59:00
Design/Logic Flaw
2015-07-06 19:59:00
threatpost
threatpost
Vulnerability-Riddled Drug Pumps Open to Takeover
2015-05-05 14:34:02
cvelist
cvelist
CVE-2015-3459
2015-04-29 23:00:00
CVE-2014-5406
2015-07-06 19:10:00
ics
ics
Hospira LifeCare PCA Infusion System Vulnerabilities
2018-08-23 12:00:00
Hospira LifeCare PCA Infusion System Vulnerabilities (Update A)
2018-08-23 12:00:00
Hospira LifeCare PCA Infusion System Vulnerabilities (Update B)
2018-08-23 12:00:00
nvd
nvd
CVE-2014-5406
2015-07-06 19:59:00
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.6 High
AI Score
Confidence
High
0.022 Low
EPSS
Percentile
89.5%
Related for NVD:CVE-2015-3459