42 matches found
EUVD-2015-7807
Malware in sbrugna...
EUVD-2015-1156
Malware in sbrugna...
EUVD-2015-3989
Malware in sbrugna...
CVE-2015-1012
Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with wireless capabilities, and should not be modified to be used in a wireless...
Design/Logic Flaw
Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with wireless capabilities, and should not be modified to be used in a wireless...
CVE-2015-1012
Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with wireless capabilities, and should not be modified to be used in a wireless...
CVE-2015-1012
The CVE-2015-1012 entry concerns the Hospira LifeCare PCA Infusion System. Vulnerabilities include cleartext storage of wireless network keys and hardcoded credentials, with multiple related issues (e.g., improper authorization, insufficient verification of data authenticity) that could enable un...
The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to trigger a service failure or exert other effects.
The vulnerability of the microprogrammed medical equipment, the LifeCare PCA Infusion System, arises due to an overflow in the buffer on the glass. Exploiting this vulnerability could allow a malicious actor to cause malfunctions in the system, or possibly have other effects through TCP packets...
The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to execute any code they desire.
The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is caused by an overflow in the buffer on the glass. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2015-7909
Stack-based buffer overflow in Hospira Communication Engine CE before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via traffic on TCP port...
Stack overflow
Stack-based buffer overflow in Hospira Communication Engine CE before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via traffic on TCP port...
CVE-2015-7909
Hospira LifeCare PCA Infusion System (v5.07) and Plum A+/A+3 Infusion Systems (CE prior to v1.2) are affected by a stack-based buffer overflow in the Hospira Communication Engine (CE) exposed on TCP port 5000. The vulnerability enables a remote attacker to cause a denial of service (and potential...
Hospira Multiple Products Buffer Overflow Vulnerability
OVERVIEW This advisory was originally posted to the US-CERT secure Portal library on December 3, 2015, and is being released to the NCCIC/ICS-CERT web site. Jeremy Richards of SAINT Corporation has identified a buffer overflow vulnerability in Hospira’s LifeCare PCA Infusion System. Hospira has...
The vulnerability of the microprogrammed software of the LifeCare PCA Infusion System allows a perpetrator to compromise the security of the protected information.
The vulnerability of the microprogrammed medical device LifeCare PCA Infusion System is related to errors in managing registration data. Exploiting this vulnerability could allow an intruder, operating locally, to compromise the security of protected information due to the storage of closed keys...
CVE-2015-3958
Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service forced manual reboot via a flood of TCP packets...
CVE-2015-3957
Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors...
CVE-2015-3955
Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors...
CVE-2015-1011
Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...
Stack overflow
Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors...
Hardcoded credentials
Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...