Improper access control

2018-02-1510:29:00

PRIOn knowledge base

www.prio-n.com

8.1 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.9%

JSON

An Improper Access Control issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The FTP server on the pump does not require authentication if the pump is configured to allow FTP connections.

CPENameOperatorVersion
medfusion_4000_wireless_syringe_infusion_pumpeq1.1
medfusion_4000_wireless_syringe_infusion_pumpeq1.5
medfusion_4000_wireless_syringe_infusion_pumpeq1.6

Name	Operator	Version
medfusion_4000_wireless_syringe_infusion_pump	eq	1.1
medfusion_4000_wireless_syringe_infusion_pump	eq	1.5
medfusion_4000_wireless_syringe_infusion_pump	eq	1.6