Skip to content
OpenAdvisories

Vendor

Hospira

11 known vulnerabilities.

Hospira at a glance

Last 12 months
0
Critical · all time
2
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

Symbiq Infusion System 5 MedNet 4 Plum A+ Infusion System 4 Plum A+3 Infusion System 4 LifeCare PCA Infusion System 2 Symbiq Infusion System,As previously announced by Hospira in 2013, the Symbiq Infusion System was retired by Hospira on May 31, 2015 and will be fully removed from the market by December 201 0 LifeCare PCA Infusion System (running CE version 1.0 or earlier) 0 Plum A+ Infusion System (running CE version 1.0 or earlier) 0 Plum A+3 Infusion System (running CE version 1.0 or earlier) 0

Latest advisories

  • High
    ICSA-15-337-02 1 CVE rev. 2

    Hospira Multiple Products Buffer Overflow Vulnerability

    Hospira
    first Sep 5, 2015
  • High
    ICSA-15-174-01 1 CVE rev. 2

    Hospira Symbiq Infusion System Vulnerability

    Hospira
    first Mar 26, 2015
  • Medium
    ICSA-15-132-01 1 CVE rev. 2

    Hospira LifeCare PCA Infusion System Vulnerabilities

    Hospira
    first Feb 12, 2015
  • Critical
    ICSA-15-125-01 1 CVE rev. 2

    Hospira LifeCare PCA Infusion System Vulnerabilities

    Hospira
    first Feb 5, 2015
  • Critical max 10.0
    ICSA-15-090-03 1 CVE rev. 2

    Hospira MedNet Vulnerabilitie

    Hospira
    first Jan 1, 2015
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Critical 10.0
    CVE-2014-5401

    Hospira MedNet Code Injection

    Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet…

    Hospira MedNet
  • Unscored —
    CVE-2015-1012

    Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, …

    Hospira LifeCare PCA Infusion System
  • Unscored —
    CVE-2015-3956

    Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Inf…

    Hospira Symbiq Infusion System Plum A+ Infusion System Plum A+3 Infusion System
  • Unscored —
    CVE-2015-3954

    Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Inf…

    Hospira Symbiq Infusion System Plum A+3 Infusion System Plum A+ Infusion System
  • Unscored —
    CVE-2015-3953

    Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion Sys…

    Hospira Symbiq Infusion System Plum A+ Infusion System Plum A+3 Infusion System
  • Unscored —
    CVE-2015-3952

    Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion Sys…

    Hospira Symbiq Infusion System Plum A+3 Infusion System Plum A+ Infusion System
  • Unscored —
    CVE-2015-3965

    Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations"…

    Hospira Symbiq Infusion System
  • High 7.6
    CVE-2014-5406

    Hospira LifeCare PCA Infusion System

    The Hospira LifeCare PCA Infusion System before 7.0 does not validate network traffic associated with sending a (1) drug library, (2) software update, or (3) configuration change, which allows remote attackers to modify settings or medication data via packets…

    Hospira LifeCare PCA Infusion System
  • Critical 9.0
    CVE-2014-5405

    Hospira MedNet Use of Hard-coded Password

    Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.

    Hospira MedNet
  • Medium 6.8
    CVE-2014-5400

    Hospira MedNet Password in Configuration File

    The installation component in Hospira MedNet before 6.1 places cleartext credentials in configuration files, which allows local users to obtain sensitive information by reading a file.

    Hospira MedNet
  • Medium 6.8
    CVE-2014-5403

    Hospira MedNet Use of Hard-coded Cryptographic Key

    Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

    Hospira MedNet