Vulnerabilidades en Hospira
11 resultadosAnálisis Vexday
A Hospira apresenta 11 vulnerabilidades catalogadas, porém nenhuma em exploração ativa (KEV) ou crítica (CVSS 9.0+), com a fraqueza dominante concentrada em credenciais hardcoded (CWE-259). O perfil de risco é estável, sem descobertas recentes nos últimos 90 dias, sugerindo um cenário de vulnerabilidades legadas que demandam atenção em contextos de auditoria de código e gestão de segredos, mas sem pressão imediata de resposta a ataques.
CVE-2014-5401—Hospira MedNet Code InjectionEPSS 5.0%CVE-2015-3965—Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevaEPSS 2.9%CVE-2014-5405—Hospira MedNet Use of Hard-coded PasswordEPSS 2.3%CVE-2015-3954—Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, versionEPSS 2.0%CVE-2015-3953—Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and EPSS 2.0%CVE-2014-5403—Hospira MedNet Use of Hard-coded Cryptographic KeyEPSS 1.7%CVE-2014-5406—Hospira LifeCare PCA Infusion SystemEPSS 1.2%CVE-2015-3952—Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and EPSS 1.0%CVE-2015-3956—Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, versionEPSS 1.0%CVE-2015-1012—Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeEPSS 0.8%CVE-2014-5400—Hospira MedNet Password in Configuration FileEPSS 0.3%