CVE-2015-3954

Hospira Plum A+ Infusion System (versions 13.4 and earlier), Plum A+3 Infusion System (13.6 and earlier), and Symbiq Infusion System (3.13 and earlier) expose unauthenticated root privileges on Port 23/TELNET by default, allowing an unauthorized user to issue pump commands. Hospira notes Plum 360...

Hospira Plum A+ and Symbiq Infusion Systems Vulnerabilities

OVERVIEW Independent researcher Billy Rios has identified vulnerabilities in Hospira’s Plum A+ Infusion System that are similar to vulnerabilities identified in Hospira’s LifeCare PCA Infusion System discussed in advisory, ICSA-15-125-01B Hospira LifeCare PCA Infusion System Vulnerabilities...