CVE-2014-5403

Summary

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected Software

Weaknesses

• CWE-321: CWE-321

ADP Enrichment

CVE Program Container

Additional References

• https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03

References

• https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03
• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.json

• ←Previous
• Next→