RSS   Vulnerabilities for 'Lifecare pcainfusion firmware'   RSS

2015-07-06
 
CVE-2015-3958

 

 
Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (forced manual reboot) via a flood of TCP packets.

 
 
CVE-2015-3957

 

 
Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors.

 
 
CVE-2015-3955

 

 
Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors.

 
 
CVE-2015-1011

 

 
Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

 
 
CVE-2014-5406

 

 
The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify settings or medication data via packets on the (a) TELNET, (b) HTTP, (c) HTTPS, or (d) UPNP port. NOTE: this issue might overlap CVE-2015-3459.

 
2015-04-29
 
CVE-2015-3459

 

 
The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands.

 

 >>> Vendor: Hospira 7 Products
Mednet
Lifecare pcainfusion pump firmware
Lifecare pcainfusion firmware
Lifecare pca3
Lifecare pca5
Lifecare pca infusion system
Communication engine


Copyright 2019, cxsecurity.com

 

Back to Top