282 matches found
Design/Logic Flaw
Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors...
CVE-2015-3958
CVE-2015-3958 affects Hospira LifeCare PCA Infusion System (Version 5.0 and earlier). The issue enables remote denial-of-service via a flood of TCP packets, forcing manual reboot. Impact is tied to vulnerable AppWeb/network services; exploitation details are discussed in ICS-CERT/NVD entries. Mit...
CVE-2015-3958
Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service forced manual reboot via a flood of TCP packets...
CVE-2015-3957
CVE-2015-3957 applies to Hospira LifeCare PCA Infusion System prior to v7.0, where private keys and certificates are stored on the device. The public-facing details in the connected ICS/NIST sources describe a stack-based buffer overflow risk and related UI/network exposure in older LifeCare PCA ...
CVE-2014-5406
Hospira LifeCare PCA Infusion System prior to version 7.0 is affected by CVE-2014-5406. The device’s network-facing components (TELNET, HTTP/HTTPS, UPNP) do not validate or restrict incoming traffic, enabling an unauthenticated remote attacker to modify drug libraries, software updates, or pump c...
CVE-2014-5406 Hospira LifeCare PCA Infusion System
The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a 1 drug library, 2 software update, or 3 configuration change, which allows remote attackers to modify settings or medication data via packets on the a TELNET, b HTTP, c HTTPS, or d UPNP...
CVE-2015-3955
Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2015-1011
Hospira LifeCare PCA Infusion System (Version 5.0 and earlier) is affected by multiple vulnerabilities, notably hardcoded credentials and insecure data handling. Technical details from ICS-CERT/NVD describe improper authorization (CWE-285) that could allow unauthenticated users root access and in...
Hospira Lifecare PCA Infusion Pump Security Bypass Vulnerability
Hospira Lifecare PCA infusion Pump is a suite of smart infusion pump software from Hospira, USA. A security bypass vulnerability exists in Hospira Lifecare PCA Infusion Pump. An attacker could use this vulnerability to bypass authentication mechanisms and gain access to affected devices...
Hospira Lifecare PCA Infusion Pump Information Disclosure Vulnerability
Hospira Lifecare PCA infusion Pump is a suite of smart infusion pump software from Hospira, USA. An information disclosure vulnerability exists in Hospira Lifecare PCA Infusion Pump. An attacker could exploit this vulnerability to gain access to sensitive information...
Multiple Hospira Product Security Bypass Vulnerabilities
The Hospira Plum A+ Infusion System, Plum A+3 Infusion System and Symbiq Infusion System are all intelligent infusion systems from Hospira. A security bypass vulnerability exists in multiple Hospira products. An attacker could exploit the vulnerability to bypass security restrictions and perform...
Authentication Bypass Vulnerability in Multiple Hospira Products
The Hospira Plum A+ Infusion System, Plum A+3 Infusion System and Symbiq Infusion System are all intelligent infusion systems from Hospira. An authentication bypass vulnerability exists in multiple Hospira products. An attacker could use this vulnerability to bypass the authentication mechanism a...
Information Disclosure Vulnerability in Multiple Hospira Products
The Hospira Plum A+ Infusion System, Plum A+3 Infusion System and Symbiq Infusion System are all intelligent infusion systems from Hospira. An information disclosure vulnerability exists in multiple Hospira products. An attacker could exploit this vulnerability to obtain sensitive information...
Local Security Bypass Vulnerability in Multiple Hospira Products
The Hospira Plum A+ Infusion System, Plum A+3 Infusion System and Symbiq Infusion System are all intelligent infusion systems from Hospira. A local security bypass vulnerability exists in multiple Hospira products. A local attacker could exploit this vulnerability to bypass security restrictions...
Stack Buffer Overflow Vulnerability in Multiple Hospira Products
The Hospira Plum A+ Infusion System, Plum A+3 Infusion System and Symbiq Infusion System are all intelligent infusion systems from Hospira. A stack buffer overflow vulnerability exists in multiple Hospira products due to the program failing to perform proper boundary checks on user-submitted inpu...
Remote Denial of Service Vulnerability in Multiple Hospira Products
The Hospira Plum A+ Infusion System, Plum A+3 Infusion System and Symbiq Infusion System are all intelligent infusion systems from Hospira. A remote denial of service vulnerability exists in multiple Hospira products. An attacker could exploit this vulnerability to cause a denial of service...
Hardcoded Password Security Bypass Vulnerability in Multiple Hospira Products
The Hospira Plum A+ Infusion System, Plum A+3 Infusion System and Symbiq Infusion System are all intelligent infusion systems from Hospira. A security bypass vulnerability exists in multiple Hospira products. An attacker could exploit this vulnerability to bypass security restrictions and gain...
Hospira LifeCare PCA Infusion System Security Restriction Bypass Vulnerability
The Hospira LifeCare PCA Infusion System is an IV infusion pump that delivers medications to patients. Hospira LifeCare PCA Infusion System 5.0 and earlier versions are vulnerable to a data authenticity validation vulnerability in their implementation by uploading software updates, configuration...
Hospira Lifecare PCA Infusion Pump Arbitrary Command Execution Vulnerability
Hospira Lifecare PCA infusion pump is a suite of smart infusion pump software from Hospira USA. Failure to perform authentication for Telnet sessions in Hospira Lifecare PCA infusion pumps running SW ver 412 allows a remote attacker to gain root privileges by accessing the telnet service...
CVE-2015-3459
The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands...