CVEvulnerability

CVE-2016-8355

9.9 CRITICAL Published 2017-02-13 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2017-02-13
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.0 ([email protected])
9.9 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.0 ([email protected])
9.0 HIGH — AV:N/AC:L/Au:S/C:C/I:C/A:C
Weaknesses
CWE-306

Description

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and delete users, and change user permissions. According to Smiths-Medical, physical access to the pump is required to install drug library updates.

Affected configurations

• smiths-medical cadd-solis medication safety software 1.0 • smiths-medical cadd-solis medication safety software 2.0 • smiths-medical cadd-solis medication safety software 3.0 • smiths-medical cadd-solis medication safety software 3.1

Related

Weakness · CWE (1)

  • CWE-306 Missing Authentication for Critical Functionality weakness

References