CVE-2014-5421 — MEDIUM (6.8)

Vulnerability Description

CareFusion Pyxis SupplyStation 8.1 with hardware test tool 1.0.16 and earlier has a hardcoded database password, which makes it easier for local users to gain privileges by leveraging cabinet access.

CVSS Score

6.8

MEDIUM

AV:L/AC:L/Au:N/C:C/I:C/A:P

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

PARTIAL

Affected Products

Vendor	Product	Versions
Carefusion	Pyxis Supplystation	8.1

Related Weaknesses (CWE)

CWE-255

References

https://ics-cert.us-cert.gov/advisories/ICSA-14-288-01US Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-14-288-01US Government Resource

FAQ

What is CVE-2014-5421?

CVE-2014-5421 is a vulnerability with a CVSS score of 6.8 (MEDIUM). CareFusion Pyxis SupplyStation 8.1 with hardware test tool 1.0.16 and earlier has a hardcoded database password, which makes it easier for local users to gain privileges by leveraging cabinet access.

How severe is CVE-2014-5421?

CVE-2014-5421 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-5421?

Check the references section above for vendor advisories and patch information. Affected products include: Carefusion Pyxis Supplystation.