CVE-2015-1011

Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.

Score

CVSS 2.0 5.0 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2015-07-06

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Lifecare Pcainfusion Firmware (Hospira)

References

• http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm
• https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01A