Hospira Schwachstellen

Zeitverlauf

Typ

Medical Device Software	13
Not Defined	4

Produkt

Hospira LifeCare PCA Infusion System	7
Hospira Symbiq Infusion System	5
Hospira MedNet	4
Hospira Plum A+ Infusion System	4
Hospira Plum A+3 Infusion System	4

Massnahmen

Official Fix	9
Temporary Fix	0
Workaround	5
Unavailable	0
Not Defined	3

Ausnutzbarkeit

High	0
Functional	0
Proof-of-Concept	0
Unproven	0
Not Defined	17

Zugriffsart

Not Defined	0
Physical	0
Local	2
Adjacent	3
Network	12

Authentisierung

Not Defined	0
High	0
Low	2
None	15

Benutzeraktivität

Not Defined	0
Required	0
None	17

C3BM Index

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	2
≤7	0
≤8	9
≤9	1
≤10	3

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	2
≤7	3
≤8	6
≤9	1
≤10	3

VulDB

≤1	0
≤2	0
≤3	0
≤4	1
≤5	1
≤6	2
≤7	3
≤8	7
≤9	1
≤10	2

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	3
≤9	1
≤10	4

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Hersteller

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploit 0-day

<1k	0
<2k	8
<5k	8
<10k	0
<25k	0
<50k	1
<100k	0
≥100k	0

Exploit heute

<1k	17
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Exploitmarktvolumen

🔴 CTI Aktivitäten

Affected Products (6): LifeCare PCA Infusion System (7), Lifecare PCA Infusion Pump (1), MedNet (4), Plum A+3 Infusion System (4), Plum A+ Infusion System (4), Symbiq Infusion System (5)

Veröffentlicht	Base	Temp	Schwachstelle	Prod	Aus	Mas	EPSS	CTI	CVE
26.03.2019	8.5	8.4	Hospira MedNet JBoss Enterprise Application Platform erweiterte Rechte	Unbekannt	Not Defined	Official Fix	0.00190	0.04	CVE-2014-5401
25.03.2019	8.0	8.0	Hospira Plum A+ Infusion System schwache Authentisierung	Medical Device Software	Not Defined	Workaround	0.00213	0.04	CVE-2015-3956
25.03.2019	9.3	9.2	Hospira Plum A+ Infusion System Telnet Service erweiterte Rechte	Medical Device Software	Not Defined	Workaround	0.00213	0.00	CVE-2015-3954
25.03.2019	8.0	8.0	Hospira Plum A+ Infusion System schwache Authentisierung	Medical Device Software	Not Defined	Workaround	0.00213	0.02	CVE-2015-3953
25.03.2019	7.4	7.4	Hospira Plum A+ Infusion System Information Disclosure	Medical Device Software	Not Defined	Not Defined	0.00162	0.00	CVE-2015-3952
25.03.2019	7.4	7.1	Hospira LifeCare PCA Infusion System Information Disclosure	Medical Device Software	Not Defined	Official Fix	0.00162	0.04	CVE-2015-1012
23.03.2019	7.5	7.5	Hospira Symbiq Infusion System erweiterte Rechte	Medical Device Software	Not Defined	Not Defined	0.00207	0.04	CVE-2015-3965
22.01.2016	7.3	7.0	Hospira LifeCare PCA Infusion System Communication Engine Pufferüberlauf	Medical Device Software	Not Defined	Official Fix	0.00207	0.02	CVE-2015-7909
06.07.2015	5.3	5.2	Hospira LifeCare PCA Infusion System TCP Packet Denial of Service	Medical Device Software	Not Defined	Workaround	0.00520	0.00	CVE-2015-3958
06.07.2015	5.9	5.7	Hospira LifeCare PCA Infusion System Private Key Storage erweiterte Rechte	Medical Device Software	Not Defined	Official Fix	0.00103	0.04	CVE-2015-3957

7 weitere Einträge werden nicht mehr angezeigt

🔒 Login Required

You need to signup and login to see more of the remaining 7 results.

◂ ZurückÜbersichtWeiter ▸

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!