CVE-2015-3955
HighSummary
A stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier allows remote attackers to execute arbitrary code.
Risk Assessment
Attackers may remotely take control of the system, posing a serious threat to patient safety and system integrity.
Recommendation
It is recommended to update the system to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Hospira LifeCare PCA Infusion System
See all- CVE-2015-3958High
The Hospira LifeCare PCA Infusion System version 5.0 and earlier, and possibly other versions, allows remote attackers to cause a denial of service (forced manual reboot) via a flood of TCP packets.
- CVE-2014-5406High
The Hospira LifeCare PCA Infusion System before version 7.0 does not validate network traffic associated with sending a drug library, software update, or configuration change. This allows remote attackers to modify settings or medication data via packets on TELNET, HTTP, HTTPS, or UPNP ports.
- CVE-2015-3459High
The communication module on the Hospira LifeCare PCA Infusion System before version 7.0 does not require authentication for root TELNET sessions, allowing remote attackers to modify the pump configuration via unspecified commands.
Original NVD description (English source)
Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors.