CVE-2014-5403

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

Score

CVSS 2.0 6.8 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-04-03

Last modified

2025-11-03

Weaknesses

CWE-310, CWE-321

Affected products

• Mednet (Hospira)

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03
• https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03