RSS   Vulnerabilities for 'Lifecare pcainfusion firmware'   RSS

2015-07-06
 
CVE-2015-3958

 
 
Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (forced manual reboot) via a flood of TCP packets.

 
 
CVE-2015-3957

 
 
Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors.

 
 
CVE-2015-3955

 
 
Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors.

 
 
CVE-2015-1011

 
 
Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

 
 
CVE-2014-5406

 
 
The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify settings or medication data via packets on the (a) TELNET, (b) HTTP, (c) HTTPS, or (d) UPNP port. NOTE: this issue might overlap CVE-2015-3459.

 
2015-04-29
 
CVE-2015-3459

 
 
The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands.

 

 >>> Vendor: Hospira 7 Products
Mednet
Lifecare pcainfusion pump firmware
Lifecare pcainfusion firmware
Lifecare pca3
Lifecare pca5
Lifecare pca infusion system
Communication engine

Copyright 2024, cxsecurity.com

 

Back to Top