CVE-2017-12723

A Password in Configuration File issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump stores some passwords in the configuration file, which are accessible if the pump is configured to allow external communications.

Score

CVSS 3.0 3.7 Low

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-02-15

Last modified

2024-08-05

Weaknesses

CWE-200, CWE-260

Affected products

• Medfusion 4000 Wireless Syringe Infusion Pump (Smiths-medical)

References

• http://www.securityfocus.com/bid/100665
• https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A