CVE-2015-3965

Published: Mar 23, 2019Modified: Nov 21, 2024

8.8

Vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function.

Affected (1)

Products: Pfizer: Symbiq Infusion System Firmware

Pfizer

1 product

Symbiq Infusion System Firmware

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Pfizer Symbiq Infusion System Firmware	Up to 3.13

Running on/with	Platform Versions
Pfizer Symbiq Infusion System	All versions

Related CWEs

CWE-264

References (2)

https://ics-cert.us-cert.gov/advisories/ICSA-15-174-01

Source: ics-cert@hq.dhs.gov

Third Party AdvisoryUS Government Resource

https://ics-cert.us-cert.gov/advisories/ICSA-15-174-01

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

Timeline

No history available yet.