CVE-2015-3957 : Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certific

Hospira LifeCare PCA Infusion System before 7.0 stores private keys and certificates, which has unspecified impact and attack vectors.

Published 2015-07-06 19:59:03

Updated 2016-12-06 03:01:33

Source ICS-CERT

View at NVD, CVE.org

Products affected by CVE-2015-3957

Hospira » Lifecare Pca5 » Version: N/A
cpe:2.3:h:hospira:lifecare_pca5:-:*:*:*:*:*:*:*
Matching versions
Hospira » Lifecare Pca3 » Version: N/A
cpe:2.3:h:hospira:lifecare_pca3:-:*:*:*:*:*:*:*
Matching versions
Hospira » Lifecare Pcainfusion Firmware
Versions up to, including, (<=) 5.0
cpe:2.3:o:hospira:lifecare_pcainfusion_firmware:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.10%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 41 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
4.6	MEDIUM	AV:L/AC:L/Au:N/C:P/I:P/A:P	3.9	6.4	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: Partial Integrity Impact: Partial Availability Impact: Partial

http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm

Page Not Found | FDA
Third Party Advisory;US Government Resource

CVEs referencing this url
http://www.securityfocus.com/bid/75136

Multiple Hospira Products CVE-2015-3957 Local Security Bypass Vulnerability
https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01B

Hospira LifeCare PCA Infusion System Vulnerabilities (Update B) | CISA
Third Party Advisory;US Government Resource

CVEs referencing this url

Jump to