Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.
References
| Link | Resource |
|---|---|
| https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01 | Mitigation Third Party Advisory US Government Resource |
| https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01 | Mitigation Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
21 Nov 2024, 02:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01 - Mitigation, Third Party Advisory, US Government Resource |
Information
Published : 2019-03-25 17:29
Updated : 2024-11-21 02:30
NVD link : CVE-2015-3953
Mitre link : CVE-2015-3953
CVE.ORG link : CVE-2015-3953
JSON object : View
Products Affected
pifzer
- plum_a\+_infusion_system
- symbiq_infusion_system_firmware
- plum_a\+3_infusion_system
- plum_a\+_infusion_system_firmware
- symbiq_infusion_system
- plum_a\+3_infusion_system_firmware