Hospira MedNet CVE-2014-5403 Hardcoded Cryptographic Key Vulnerability
BID:73480
Info
Hospira MedNet CVE-2014-5403 Hardcoded Cryptographic Key Vulnerability
| Bugtraq ID: | 73480 |
| Class: | Design Error |
| CVE: |
CVE-2014-5403 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 31 2015 12:00AM |
| Updated: | Mar 31 2015 12:00AM |
| Credit: | Billy Rios |
| Vulnerable: |
Hospira MedNet 5.8 |
| Not Vulnerable: |
Hospira MedNet 6.1 |
Discussion
Hospira MedNet CVE-2014-5403 Hardcoded Cryptographic Key Vulnerability
Hospira MedNet is prone to a hard-coded cryptographic key vulnerability.
Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks.
Hospira MedNet 5.8 and prior are vulnerable.
Hospira MedNet is prone to a hard-coded cryptographic key vulnerability.
Successful exploits will allow attackers to obtain sensitive information that may aid in further attacks.
Hospira MedNet 5.8 and prior are vulnerable.
Exploit / POC
Hospira MedNet CVE-2014-5403 Hardcoded Cryptographic Key Vulnerability
Attackers can use standard, readily available tools to exploit this issue.
Attackers can use standard, readily available tools to exploit this issue.
Solution / Fix
Hospira MedNet CVE-2014-5403 Hardcoded Cryptographic Key Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Hospira MedNet CVE-2014-5403 Hardcoded Cryptographic Key Vulnerability
References:
References:
- Hospira MedNet - Homepage (Hospira)
- Hospira MedNet Vulnerabilities (ICS-CERT)