CVE-2015-3952CWE-312

Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq…

published March 25, 2019

CVSS
—
EPSS
1%
Percentile
62.5
In the wild
Unconfirmed
What it is

Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01008 · 62.5th percentile
Weakness
CWE-312 · Cleartext Storage of Sensitive Information
Published
2019-03-25T15:42Z
EPSS history
Timeline
  • 25 MAR 15:42Z
    Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq…
    cvelistv5