CVE-2015-3953: Use of Hard-coded Password

Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices...

CVE-2015-3965

Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function...

CVE-2015-3965

Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function...

CVE-2015-3965: Undefined Security Weakness

Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function...

Hospira Symbiq Infusion System Unauthorized Access Vulnerability

The Hospira Symbiq Infusion System is an intelligent infusion system from Hospira USA. An unauthorized access vulnerability exists in the Hospira Symbiq Infusion System, which allows remote attackers to bypass restrictions and perform unauthorized operations...

Information Disclosure Vulnerability in Multiple Hospira Products

The Hospira Plum A+ Infusion System, Plum A+3 Infusion System and Symbiq Infusion System are all intelligent infusion systems from Hospira. An information disclosure vulnerability exists in multiple Hospira products. An attacker could exploit this vulnerability to obtain sensitive information...