VULNERABILITY INTELLIGENCE
CVE-2015-3459
CVSS score10 HIGH
EPSS probability5.06%
CISA KEVNot currently listed
Published2015-04-29
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands.
Primary references
- cve@mitre.org — Broken Link
- cve@mitre.org — Not Applicable
- cve@mitre.org — Not Applicable
- cve@mitre.org — Third Party Advisory, US Government Resource
- cve@mitre.org — Third Party Advisory, VDB Entry
- cve@mitre.org — Third Party Advisory, US Government Resource
- cve@mitre.org — Press/Media Coverage
- cve@mitre.org — Press/Media Coverage
- af854a3a-2127-422b-91ae-364da2661108 — Broken Link
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
- af854a3a-2127-422b-91ae-364da2661108 — Not Applicable
- af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, US Government Resource