LifeCare PCA Infusion System Unvalidated Remote Pharmacy Operations Vulnerability

The LifeCare PCA Infusion System is an infusion pump solution. A security vulnerability in the WEB interface of the LifeCare PCA Infusion System device allows a remote attacker to upload an arbitrary medication library to the device due to a lack of proper authentication...

Hospira LifeCare PCA Infusion System Vulnerabilities

OVERVIEW Independent researcher Billy Rios has identified an improper authorization vulnerability and an insufficient verification of data authenticity vulnerability in Hospira’s LifeCare PCA Infusion System, which NCCIC/ICS-CERT has been coordinating with Hospira since May 2014. This advisory is...