← Back

Pfizer

pfizer

2 CVEs • 4 products

Products (4)

Click to collapse
Toggle
Symbiq Infusion System Firmware
symbiq_infusion_system_firmware
1 CVE
Lifecare Pca Infusion System Firmware
lifecare_pca_infusion_system_firmware
1 CVE
Symbiq Infusion System
symbiq_infusion_system
0 CVEs
Lifecare Pca Infusion System
lifecare_pca_infusion_system
0 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2015-1012
1Pfizer
1Lifecare Pca Infusion System Firmware
Nov 21, 2024
Mar 25, 2019
N/A· v4
7.5 HIGH· v3
5.0 MEDIUM· v2
Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with...Show more
Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with wireless capabilities, and should not be modified to be used in a wireless capacity in a clinical setting. Hospira has developed a new version of the PCS Infusion System, version 7.0 that addresses the identified vulnerabilities. Version 7.0 has Port 20/FTP and Port 23/TELNET closed by default to prevent unauthorized access.Show less
CVE-2015-3965
1Pfizer
1Symbiq Infusion System Firmware
Nov 21, 2024
Mar 23, 2019
N/A· v4
8.8 HIGH· v3
9.0 HIGH· v2
Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function.