PT-2015-1627 · Hospira · Hospira Lifecare Pca Infusion System

Published 2015-07-06 · Updated 2016-12-06 · CVE-2015-3957

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Medium

Base vector

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Hospira LifeCare PCA Infusion System versions prior to 7.0

Description The issue is related to errors in managing registration data in the software of the medical device. It may allow a local attacker to impact the security of protected information due to the storage of private keys and certificates on the device.

Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

BDU:2015-10970

CVE-2015-3957

Affected Products

Hospira Lifecare Pca Infusion System

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2015-3957 · Security Note
• https://bdu.fstec.ru/vul/2015-10970 · Security Note
• http://securityfocus.com/bid/75136 · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01B · Note
• http://fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm · Note