CVEvulnerability
CVE-2015-3965
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-03-23
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function.
Affected configurations
• pfizer symbiq infusion system firmware (<= 3.13)
Related
Weakness · not in database (1)
References
- https://ics-cert.us-cert.gov/advisories/ICSA-15-174-01 Third Party Advisory, US Government Resource
- https://ics-cert.us-cert.gov/advisories/ICSA-15-174-01 Third Party Advisory, US Government Resource