Vulnerability in Hospira Mednet

CVE-2014-5403

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

EPSS: 0.017 (75.4th percentile) — read the EPSS interpretation.

Affected products

Hospira Mednet — versions 0, 6.1

Weakness classification (CWE)

References

ics-cert@hq.dhs.gov
ics-cert@hq.dhs.gov
af854a3a-2127-422b-91ae-364da2661108 (Third Party Advisory, US Government Resource)