QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2014-5406

Back to search

CVE-2014-5406

Published: Jul 6, 2015

Modified: Nov 3, 2025

PUBLISHED

Description

The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify settings or medication data via packets on the (a) TELNET, (b) HTTP, (c) HTTPS, or (d) UPNP port. NOTE: this issue might overlap CVE-2015-3459.

VendorProductVersions

Hospira

LifeCare PCA Infusion System

affected
0 - <= 5.0
unaffected
7.0

Weaknesses (CWE)

CWE-345

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now