What’s Vulnerable › Vulnerabilities

CVE-2014-5403: Hospira MedNet Use of Hard-coded Cryptographic Key

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-04-03 · updated 2026-06-17
• Weakness: CWE-321

Description

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

Affected products

• Hospira MedNet: through 5.8

References

• https://github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.json
• https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03
• https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03

Get alerted when CVE-2014-5403 or the next vulnerability affects your stack