Hardcoded credentials

Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2014-5406

The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a 1 drug library, 2 software update, or 3 configuration change, which allows remote attackers to modify settings or medication data via packets on the a TELNET, b HTTP, c HTTPS, or d UPNP...

CVE-2015-3957

Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors...

CVE-2015-3958

Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service forced manual reboot via a flood of TCP packets...

CVE-2015-3958

CVE-2015-3958 affects Hospira LifeCare PCA Infusion System (Version 5.0 and earlier). The issue enables remote denial-of-service via a flood of TCP packets, forcing manual reboot. Impact is tied to vulnerable AppWeb/network services; exploitation details are discussed in ICS-CERT/NVD entries. Mit...

CVE-2015-3957

CVE-2015-3957 applies to Hospira LifeCare PCA Infusion System prior to v7.0, where private keys and certificates are stored on the device. The public-facing details in the connected ICS/NIST sources describe a stack-based buffer overflow risk and related UI/network exposure in older LifeCare PCA ...

CVE-2015-1011

Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...

CVE-2015-1011

Hospira LifeCare PCA Infusion System (Version 5.0 and earlier) is affected by multiple vulnerabilities, notably hardcoded credentials and insecure data handling. Technical details from ICS-CERT/NVD describe improper authorization (CWE-285) that could allow unauthenticated users root access and in...

CVE-2015-3955

Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors...

CVE-2014-5406 Hospira LifeCare PCA Infusion System

The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a 1 drug library, 2 software update, or 3 configuration change, which allows remote attackers to modify settings or medication data via packets on the a TELNET, b HTTP, c HTTPS, or d UPNP...

CVE-2014-5406

Hospira LifeCare PCA Infusion System prior to version 7.0 is affected by CVE-2014-5406. The device’s network-facing components (TELNET, HTTP/HTTPS, UPNP) do not validate or restrict incoming traffic, enabling an unauthenticated remote attacker to modify drug libraries, software updates, or pump c...

Hospira Lifecare PCA Infusion Pump Security Bypass Vulnerability

Hospira Lifecare PCA infusion Pump is a suite of smart infusion pump software from Hospira, USA. A security bypass vulnerability exists in Hospira Lifecare PCA Infusion Pump. An attacker could use this vulnerability to bypass authentication mechanisms and gain access to affected devices...

Hospira Lifecare PCA Infusion Pump Information Disclosure Vulnerability

Hospira Lifecare PCA infusion Pump is a suite of smart infusion pump software from Hospira, USA. An information disclosure vulnerability exists in Hospira Lifecare PCA Infusion Pump. An attacker could exploit this vulnerability to gain access to sensitive information...

The vulnerability of the microprogrammed software of Hospira Lifecare PCA allows a intruder to gain control over the device.

The vulnerability of Hospira Lifecare PCA medical equipment’s microprogramming software lies in the lack of authentication when connecting via Telnet protocol on port 23. Exploiting this vulnerability can allow a malicious actor to gain control over the device remotely...

Hospira LifeCare PCA Infusion System Security Restriction Bypass Vulnerability

The Hospira LifeCare PCA Infusion System is an IV infusion pump that delivers medications to patients. Hospira LifeCare PCA Infusion System 5.0 and earlier versions are vulnerable to a data authenticity validation vulnerability in their implementation by uploading software updates, configuration...

Hospira Lifecare PCA Infusion Pump Arbitrary Command Execution Vulnerability

Hospira Lifecare PCA infusion pump is a suite of smart infusion pump software from Hospira USA. Failure to perform authentication for Telnet sessions in Hospira Lifecare PCA infusion pumps running SW ver 412 allows a remote attacker to gain root privileges by accessing the telnet service...

Authentication flaw

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands...

CVE-2015-3459

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands...

CVE-2015-3459

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands...

CVE-2015-3459

Hospira LifeCare PCA Infusion System (pre-7.0) has an unauthenticated root Telnet access in the device’s communication module, allowing remote modification of pump configuration. Connected sources confirm affected products include LifeCare PCA Infusion System versions 5.0 and older, with exploita...