NVD

Id
25280  
Name
CVE-2015-3459  
Description
The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-04-29  
Modified Date
2017-01-03  
Seq
2015-3459  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
133794 25280 CVE-2015-3459 http://imgur.com/CEAnZjj  View
133795 25280 CVE-2015-3459 http://imgur.com/JHiWSqd  View
133796 25280 CVE-2015-3459 http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm  View
133797 25280 CVE-2015-3459 74414  View
133798 25280 CVE-2015-3459 https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01  View
133799 25280 CVE-2015-3459 https://twitter.com/dyngnosis/status/592671049487142913  View
133800 25280 CVE-2015-3459 https://twitter.com/dyngnosis/status/592743461977219072  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7193 JVNDB-2015-002513 Hospira Lifecare PCA 輸液ポンプにおける root 権限を取得される脆弱性 Hospira Lifecare PCA 輸液ポンプは、Telnet セッションに認証を要求しないため、root 権限を取得される脆弱性が存在します。 CVE-2015-3459 80684 CVE-2015-3459 25280 10 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002513.html 2015-04-27 2015-05-20 View