Vulnerability Description
Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet software, MedNet 6.1. Existing versions of MedNet can be upgraded to MedNet 6.1.
CVSS Score
CRITICAL
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hospira | Mednet | <= 5.8 |
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-09
- https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03
- https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2014-5401?
CVE-2014-5401 is a vulnerability with a CVSS score of 9.8 (CRITICAL). Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the targe...
How severe is CVE-2014-5401?
CVE-2014-5401 has been rated CRITICAL with a CVSS base score of 9.8/10. This is considered a critical vulnerability requiring immediate attention.
Is there a patch for CVE-2014-5401?
Check the references section above for vendor advisories and patch information. Affected products include: Hospira Mednet.