Vulnerabilities > Hospira > Medium

DATE CVE VULNERABILITY TITLE RISK
2015-07-06 CVE-2015-3957 Credentials Management vulnerability in Hospira products
Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors.
local
low complexity
hospira CWE-255
4.6
2015-07-06 CVE-2015-1011 Information Exposure vulnerability in Hospira Lifecare Pcainfusion Firmware 5.0
Hospira LifeCare PCA Infusion System before 7.0 has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors.
network
low complexity
hospira CWE-200
5.0
2015-04-03 CVE-2014-5403 Cryptographic Issues vulnerability in Hospira Mednet 5.8
Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.
network
low complexity
hospira CWE-310
5.0