Vulnerability Description
Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.
CVSS Score
6.8
MEDIUM
AV:N/AC:L/Au:S/C:C/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Hospira | Mednet | <= 5.8 |
Related Weaknesses (CWE)
References
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-09
- https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03
- https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03Third Party AdvisoryUS Government Resource
FAQ
What is CVE-2014-5403?
CVE-2014-5403 is a vulnerability with a CVSS score of 6.8 (MEDIUM). Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the netwo...
How severe is CVE-2014-5403?
CVE-2014-5403 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2014-5403?
Check the references section above for vendor advisories and patch information. Affected products include: Hospira Mednet.