Vulnerability in Carefusion Pyxis Supplystation
CVE-2014-5420
CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded application password, which makes it easier for remote authenticated users to obtain application-file access via unspecified vectors.
EPSS: 0.009 (56.8th percentile) — read the EPSS interpretation.
Affected products
- Carefusion Pyxis_supplystation — versions 8.1
- N/a — versions n/a
Weakness classification (CWE)
References
- ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)