Hardcoded credentials

2015-04-0310:59:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

61.1%

JSON

Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.

CPENameOperatorVersion
mednetle5.8

CPE	Name	Operator	Version
	mednet	le	5.8

References

ics-cert.us-cert.gov/advisories/ICSA-15-090-03