CVE-2016-8355 — CRITICAL (9.9)

Vulnerability Description

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and delete users, and change user permissions. According to Smiths-Medical, physical access to the pump is required to install drug library updates.

CVSS Score

9.9

CRITICAL

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Smiths-Medical	Cadd-Solis Medication Safety Software	1.0

Related Weaknesses (CWE)

CWE-306

References

http://www.securityfocus.com/bid/94630Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-16-306-01Third Party AdvisoryUS Government Resource
http://www.securityfocus.com/bid/94630Third Party AdvisoryVDB Entry
https://ics-cert.us-cert.gov/advisories/ICSMA-16-306-01Third Party AdvisoryUS Government Resource

FAQ

What is CVE-2016-8355?

CVE-2016-8355 is a vulnerability with a CVSS score of 9.9 (CRITICAL). An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges ...

How severe is CVE-2016-8355?

CVE-2016-8355 has been rated CRITICAL with a CVSS base score of 9.9/10. This is considered a critical vulnerability requiring immediate attention.

Is there a patch for CVE-2016-8355?

Check the references section above for vendor advisories and patch information. Affected products include: Smiths-Medical Cadd-Solis Medication Safety Software.