Vulnerability Details CVE-2015-3955
Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.165
EPSS Ranking 94.6%
CVSS Severity
CVSS v2 Score 10.0
References
- http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm
- http://www.securityfocus.com/bid/75132
- https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01B
- http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htm
- http://www.securityfocus.com/bid/75132
- https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01B
Products affected by CVE-2015-3955
-
cpe:2.3:h:hospira:lifecare_pca3:-
-
cpe:2.3:h:hospira:lifecare_pca5:-
-
cpe:2.3:o:hospira:lifecare_pcainfusion_firmware:5.0