Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2015-1012

Quick assessment

Affected
Hospira LifeCare PCA Infusion System
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Hospira Lifecare PCA infusion Pump是美国赫升瑞（Hospira）公司的一套智能输液泵软件。 Hospira Lifecare PCA Infusion Pump中存在信息泄露漏洞。攻击者可利用该漏洞获取敏感信息的访问权限。

AI Predicted 7.5 Difficulty: Trivial EPSS 0.77% · P54
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2015-1012

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with wireless capabilities, and should not be modified to be used in a wireless capacity in a clinical setting. Hospira has developed a new version of the PCS Infusion System, version 7.0 that addresses the identified vulnerabilities. Version 7.0 has Port 20/FTP and Port 23/TELNET closed by default to prevent unauthorized access.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
敏感数据的明文存储
Source: CVE Program / CVE List V5
Vulnerability Title
Hospira Lifecare PCA Infusion Pump 信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Hospira Lifecare PCA infusion Pump是美国赫升瑞（Hospira）公司的一套智能输液泵软件。 Hospira Lifecare PCA Infusion Pump中存在信息泄露漏洞。攻击者可利用该漏洞获取敏感信息的访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Hospira LifeCare PCA Infusion System <= 5.0 -

II. Public POCs for CVE-2015-1012

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2015-1012

请登录查看更多情报信息。

Other References for CVE-2015-1012 (1)

Same Patch Batch · Hospira · 2019-03-25 · 5 CVEs total

CVE-2015-3952 多款Hospira产品信息泄露漏洞
CVE-2015-3953 多款Hospira产品安全漏洞
CVE-2015-3954 多款Hospira产品安全漏洞
CVE-2015-3956 多款Hospira产品安全漏洞

IV. Related Vulnerabilities

Same product: LifeCare PCA Infusion System
Same vendor: Hospira
Same weakness: CWE-312

V. Comments for CVE-2015-1012

No comments yet

Leave a comment