Smiths-medical Vulnerabilidad

Cronología

Escribe

Producto

Smiths-Medical Medfusion 4000 Wireless Syringe Inf ...8
Smiths-Medical CADD-Solis Medication Safety Softwa ...2

Contramedidas

Official Fix0
Temporary Fix0
Workaround0
Unavailable0
Not Defined10

Explotabilidad

High0
Functional0
Proof-of-Concept0
Unproven0
Not Defined10

Vector de acceso

Not Defined0
Physical2
Local0
Adjacent0
Network8

Autenticación

Not Defined0
High0
Low2
None8

La interacción del usuario

Not Defined0
Required0
None10

C3BM Index

CVSSv3 Base

≤10
≤20
≤30
≤40
≤50
≤62
≤74
≤84
≤90
≤100

CVSSv3 Temp

≤10
≤20
≤30
≤40
≤50
≤62
≤74
≤84
≤90
≤100

VulDB

≤10
≤20
≤30
≤40
≤52
≤62
≤70
≤86
≤90
≤100

NVD

≤10
≤20
≤30
≤40
≤50
≤64
≤70
≤82
≤92
≤102

CNA

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Proveedor

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Research

≤10
≤20
≤30
≤40
≤50
≤60
≤70
≤80
≤90
≤100

Explotar día 0

<1k2
<2k8
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar hoy

<1k10
<2k0
<5k0
<10k0
<25k0
<50k0
<100k0
≥100k0

Explotar el volumen del mercado

🔴 CTI Ocupaciones

Affected Products (2): CADD-Solis Medication Safety Software (2), Medfusion 4000 Wireless Syringe Infusion Pump (8)

Fecha de publicaciónBaseTempVulnerabilidadProdExpConEPSSCTICVE
2018-02-157.37.3Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump Telnet Server autenticación débilMedical Device SoftwareNot DefinedNot Defined0.001150.02CVE-2017-12726
2018-02-156.56.5Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump Network Configuration autenticación débilMedical Device SoftwareNot DefinedNot Defined0.000810.00CVE-2017-12725
2018-02-157.77.7Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump FTP Server autenticación débilMedical Device SoftwareNot DefinedNot Defined0.001720.00CVE-2017-12724
2018-02-154.54.5Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump Configuration File Password divulgación de informaciónMedical Device SoftwareNot DefinedNot Defined0.000570.00CVE-2017-12723
2018-02-155.35.3Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump Communication Module divulgación de informaciónMedical Device SoftwareNot DefinedNot Defined0.002580.00CVE-2017-12722
2018-02-155.75.7Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump Certificate autenticación débilMedical Device SoftwareNot DefinedNot Defined0.000680.00CVE-2017-12721
2018-02-157.77.7Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump FTP Server escalada de privilegiosMedical Device SoftwareNot DefinedNot Defined0.002070.00CVE-2017-12720
2018-02-156.85.9Smiths-Medical Medfusion 4000 Wireless Syringe Infusion Pump DHCP desbordamiento de búferMedical Device SoftwareProof-of-ConceptOfficial Fix0.326720.00CVE-2017-12718
2017-02-137.97.9Smiths-Medical CADD-Solis Medication Safety Software escalada de privilegiosDesconocidoNot DefinedNot Defined0.000870.00CVE-2016-8358
2017-02-137.07.0Smiths-Medical CADD-Solis Medication Safety Software autenticación débilDesconocidoNot DefinedNot Defined0.000840.04CVE-2016-8355

Interested in the pricing of exploits?

See the underground prices here!