Description (CNA)
Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Hospira / MedNet | affected 0 through 5.8; unaffected 6.1 |
CWE
CWE-321
References
- https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03
- https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.json
ADP enrichment
No English description supplied.