CVE-2014-5403CWE-321

Hospira MedNet Use of Hard-coded Cryptographic Key

Medium · published April 3, 2015

CVSS v2.0
6.8
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

The record
Technical detail
CVSS v2.0
6.8 · MEDIUM
Vector
AV:N/AC:L/Au:S/C:C/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01744 · 77.5th percentile
Weakness
CWE-321 · Use of Hard-coded Cryptographic Key
Published
2015-04-03T10:00Z
EPSS history
Timeline
  • 03 APR 10:00Z
    Hospira MedNet Use of Hard-coded Cryptographic Key
    cvelistv5