Vulnerability in Hospira Lifecare Pca3
CVE-2015-3459
The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands.
EPSS: 0.052 (91.6th percentile) — read the EPSS interpretation.
Affected products
Weakness classification (CWE)
References
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC, Not Applicable)
- cve@mitre.org (US Government Resource, Third Party Advisory, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC, Press/Media Coverage)
- cve@mitre.org (x_refsource_MISC, Broken Link)
- cve@mitre.org (x_refsource_MISC, Press/Media Coverage)
- cve@mitre.org (x_refsource_MISC, Not Applicable)
- cve@mitre.org (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)