What is CVE-2017-12723?

CVE-2017-12723 is a low-severity vulnerability in Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump, classified under Information Disclosure. CVSS score: 3.7/10. Published 2018-02-15.

How severe is CVE-2017-12723?

Low severity. CVSS v3 base score is 3.7 out of 10.

Information disclosure in Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump

CVE-2017-12723

A Password in Configuration File issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump stores some passwords in the configuration file, which are accessible if the pump is configured to allow external communications.

Vulnerability class: Information Disclosure

EPSS: 0.010 (58.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Smiths-medical Medfusion_4000_wireless_syringe_infusion_pump — versions 1.1, 1.5, 1.6
N/a Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump — versions Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

ics-cert@hq.dhs.gov (US Government Resource, Third Party Advisory, x_refsource_MISC)
ics-cert@hq.dhs.gov (VDB Entry, Third Party Advisory, vdb-entry, x_refsource_BID)

Frequently asked questions

What is CVE-2017-12723?: CVE-2017-12723 is a low-severity vulnerability in Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump, classified under Information Disclosure. CVSS score: 3.7/10. Published 2018-02-15.
How severe is CVE-2017-12723?: Low severity. CVSS v3 base score is 3.7 out of 10.