Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2014-5403

Hospira MedNet Use of Hard-coded Cryptographic Key

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
icscert

Description

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hospira MedNet

Default version status: unaffected

  • 0 to ≤ 5.8affected
  • 6.1unaffected

References