Vulnerabilities (CVE)

Filtered by vendor Hospira Subscribe
Filtered by product Mednet
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-5405 1 Hospira 1 Mednet 2015-07-24 9.0 HIGH N/A
Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.
CVE-2014-5400 1 Hospira 1 Mednet 2015-04-03 2.1 LOW N/A
The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.
CVE-2014-5403 1 Hospira 1 Mednet 2015-04-03 5.0 MEDIUM N/A
Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.