PT-2014-6464 · Carefusion · Carefusion Pyxis Supplystation

Published 2014-10-19 · Updated 2014-10-22 · CVE-2014-5422

Positive Technologies (AI Summary)

CVSS v2.0

9.7

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:P

Name of the Vulnerable Software and Affected Versions CareFusion Pyxis SupplyStation version 8.1 with hardware test tool before 1.0.16

Description The issue is related to a hardcoded service password, which makes it easier for remote attackers to obtain access. The exact vectors used for the attack are not specified.

Recommendations For CareFusion Pyxis SupplyStation version 8.1 with hardware test tool before 1.0.16, update the hardware test tool to version 1.0.16 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2014-5422

Affected Products

Carefusion Pyxis Supplystation

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2014-5422 · Security Note
• https://ics-cert.us-cert.gov/advisories/ICSA-14-288-01 · Note