Hospira MedNet password leakage Vulnerability (CVE-2014-5400)

Hospira MedNet password leakage Vulnerability (CVE-2014-5400)

Release date:
Updated on:

Affected Systems:
Hospira MedNet <= 5.8
Description:
CVE (CAN) ID: CVE-2014-5400

MedNet manages the Drug Library, firmware updates, and configurations of the Hospira intravenous injection pump for healthcare and public health.

The user name and password are stored in plain text in the local file system during MedNet installation, which can cause malicious users to damage MedNet installation.

<* Source: Billy Rios

Link: https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03
*>

Suggestion:
Vendor patch:

Hospira
-------
The vendor has released a patch to fix this security problem. Please download version 6.1 from the vendor's homepage:

Http://www.hospira.com/en/products_and_services/clinical_software/mednet/

This article permanently updates the link address: