EUVD-2014-5293

Malware in sbrugna...

EUVD-2014-5288

Malware in sbrugna...

EUVD-2014-5289

Malware in sbrugna...

PT-2019-7126

Name of the Vulnerable Software and Affected Versions Hospira MedNet software versions 5.8 and prior Description The issue allows unauthenticated users to execute arbitrary code on the target system due to the use of vulnerable versions of the JBoss Enterprise Application Platform software...

CVE-2014-5401: Improper Control of Generation of Code

Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet software, MedNet 6.1. Existing versio...

CVE-2014-5405

Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password...

CVE-2014-5403

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network...

Hardcoded credentials

Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password...

CVE-2014-5400

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file...

Design/Logic Flaw

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file...

CVE-2014-5405 Hospira MedNet Use of Hard-coded Password

Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password...

CVE-2014-5403 Hospira MedNet Use of Hard-coded Cryptographic Key

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network...

CVE-2014-5403

Summary (CVE-2014-5403) Hospira MedNet before 6.1 uses hard-coded cryptographic keys to protect data transmission from infusion pumps, enabling remote attackers to obtain sensitive information by sniffing network traffic. Affected software: MedNet server software (pre-6.1). Underlying issue: hard...

CVE-2014-5400 Hospira MedNet Password in Configuration File

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file...

CVE-2014-5400

CVE-2014-5400 affects Hospira MedNet prior to version 6.1, where the installation component stores usernames/passwords in plaintext in configuration files, enabling local attackers to read sensitive credentials. Exploitation details: local access needed; impact includes compromise of MedNet insta...

PT-2015-3801

Name of the Vulnerable Software and Affected Versions Hospira MedNet versions prior to 6.1 Description The issue allows remote attackers to obtain sensitive information by sniffing the network due to the use of hardcoded cryptographic keys for protecting data transmission from infusion pumps...

PT-2015-3802

Name of the Vulnerable Software and Affected Versions Hospira MedNet versions prior to 6.1 Description The issue concerns the use of a hardcoded cleartext password for controlling SQL database authorization. This allows remote authenticated users to bypass intended access restrictions by leveragi...

PT-2015-3800

Name of the Vulnerable Software and Affected Versions Hospira MedNet versions prior to 6.1 Description The issue concerns the installation component of Hospira MedNet, where cleartext credentials are stored in configuration files. This allows local users to access sensitive information by simply...

CVE-2014-5400: Password in Configuration File

The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file...

CVE-2014-5403: Use of Hard-coded Cryptographic Key

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network...