Hospira kayıtları
Hospira üreticisine ait 11 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Pre-auth RCE: saldırganın hesabı olmadan, ağ üzerinden kod çalıştırabildiği açıklar. Yayından KEV’e ortanca: sahada sömürülen kayıtların yayımlanmasıyla CISA listesine girmesi arasındaki tipik süre.
Tekrar eden sınıflar
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer2
- CWE-19 Data Processing Errors1
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor1
- CWE-255 Credentials Management Errors1
- CWE-259 Use of Hard-coded Password1
- CWE-260 Password in Configuration File1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
11 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | EPSS · Yayın |
|---|---|---|---|---|
42Planlayın | CVE-2015-3955İstismar yok | Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers tohospira · lifecare pcainfusion firmware · CWE-119 | Kritik10,0 | %6,66 Tem 2015 |
42Planlayın | CVE-2015-3459İstismar yok | The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, whhospira · lifecare pcainfusion firmware · CWE-264 | Kritik10,0 | %5,029 Nis 2015 |
41Planlayın | CVE-2014-5401İstismar yok | Hospira MedNet Code Injectionhospira · mednet · CWE-94 | Kritik9,8 | %5,026 Mar 2019 |
37İzleyin | CVE-2014-5405İstismar yok | Hospira MedNet Use of Hard-coded Passwordhospira · mednet · CWE-259 | Kritik9,0 | %2,33 Nis 2015 |
37İzleyin | CVE-2014-5406İstismar yok | Hospira LifeCare PCA Infusion Systemhospira · lifecare pcainfusion firmware · CWE-345 | Kritik9,3 | %1,26 Tem 2015 |
32İzleyin | CVE-2015-3958İstismar yok | Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (forhospira · lifecare pcainfusion firmware · CWE-19 | Yüksek7,8 | %2,56 Tem 2015 |
29İzleyin | CVE-2015-7909İstismar yok | Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13hospira · communication engine · CWE-119 | Yüksek7,3 | %1,122 Oca 2016 |
21İzleyin | CVE-2015-1011İstismar yok | Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via uhospira · lifecare pcainfusion firmware · CWE-200 | Orta5,0 | %2,16 Tem 2015 |
21İzleyin | CVE-2014-5403İstismar yok | Hospira MedNet Use of Hard-coded Cryptographic Keyhospira · mednet · CWE-321 | Orta5,0 | %1,73 Nis 2015 |
18İzleyin | CVE-2015-3957İstismar yok | Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors.hospira · lifecare pcainfusion firmware · CWE-255 | Orta4,6 | %0,56 Tem 2015 |
8İzleyin | CVE-2014-5400İstismar yok | Hospira MedNet Password in Configuration Filehospira · mednet · CWE-260 | Düşük2,1 | %0,33 Nis 2015 |
- CVE-2015-395542Planlayın
Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to
KritikCVSS 10,0İstismar yokEPSS %6hospira · lifecare pcainfusion firmware6 Tem 2015
- CVE-2015-345942Planlayın
The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, wh
KritikCVSS 10,0İstismar yokEPSS %5hospira · lifecare pcainfusion firmware29 Nis 2015
- CVE-2014-540141Planlayın
Hospira MedNet Code Injection
KritikCVSS 9,8İstismar yokEPSS %5hospira · mednet26 Mar 2019
- CVE-2014-540537İzleyin
Hospira MedNet Use of Hard-coded Password
KritikCVSS 9,0İstismar yokEPSS %2hospira · mednet3 Nis 2015
- CVE-2014-540637İzleyin
Hospira LifeCare PCA Infusion System
KritikCVSS 9,3İstismar yokEPSS %1hospira · lifecare pcainfusion firmware6 Tem 2015
- CVE-2015-395832İzleyin
Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (for
YüksekCVSS 7,8İstismar yokEPSS %2hospira · lifecare pcainfusion firmware6 Tem 2015
- CVE-2015-790929İzleyin
Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13
YüksekCVSS 7,3İstismar yokEPSS %1hospira · communication engine22 Oca 2016
- CVE-2015-101121İzleyin
Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via u
OrtaCVSS 5,0İstismar yokEPSS %2hospira · lifecare pcainfusion firmware6 Tem 2015
- CVE-2014-540321İzleyin
Hospira MedNet Use of Hard-coded Cryptographic Key
OrtaCVSS 5,0İstismar yokEPSS %1hospira · mednet3 Nis 2015
- CVE-2015-395718İzleyin
Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors.
OrtaCVSS 4,6İstismar yokEPSS %0hospira · lifecare pcainfusion firmware6 Tem 2015
- CVE-2014-54008İzleyin
Hospira MedNet Password in Configuration File
DüşükCVSS 2,1İstismar yokEPSS %0hospira · mednet3 Nis 2015