{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-04-24T06:23:45.292","vulnerabilities":[{"cve":{"id":"CVE-2015-1012","sourceIdentifier":"ics-cert@hq.dhs.gov","published":"2019-03-25T19:29:00.290","lastModified":"2024-11-21T02:24:29.490","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"Wireless keys are stored in plain text on version 5 of the Hospira LifeCare PCA Infusion System. According to Hospira, version 3 of the LifeCare PCA Infusion System is not indicated for wireless use, is not shipped with wireless capabilities, and should not be modified to be used in a wireless capacity in a clinical setting. Hospira has developed a new version of the PCS Infusion System, version 7.0 that addresses the identified vulnerabilities. Version 7.0 has Port 20/FTP and Port 23/TELNET closed by default to prevent unauthorized access."},{"lang":"es","value":"Las claves inalámbricas se almacenan como texto en claro en la versión 5 de Hospira LifeCare PCA Infusion System. Según Hospira, la versión 3 del LifeCare PCA Infusion System no está indicada para un uso inalámbrico, no está equipada con capacidades inalámbricas y no se debería modificar para que se use en modo inalámbrico en un entorno clínico. Hospira ha desarrollado una nueva versión del PCS Infusion System, la 7.0, que aborda las vulnerabilidades identificadas. En la versión 7.0, el Puerto 20/FTP y el Puerto 23/TELNET están cerrados por defecto para evitar el acceso no autorizado."}],"metrics":{"cvssMetricV30":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.0","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","baseScore":7.5,"baseSeverity":"HIGH","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"HIGH","integrityImpact":"NONE","availabilityImpact":"NONE"},"exploitabilityScore":3.9,"impactScore":3.6}],"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5.0,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10.0,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"weaknesses":[{"source":"ics-cert@hq.dhs.gov","type":"Secondary","description":[{"lang":"en","value":"CWE-312"}]},{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-200"}]}],"configurations":[{"operator":"AND","nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:o:pfizer:lifecare_pca_infusion_system_firmware:*:*:*:*:*:*:*:*","versionEndIncluding":"5.0","matchCriteriaId":"FAA18842-CF1B-4B64-95AB-57404B664C84"}]},{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":false,"criteria":"cpe:2.3:h:pfizer:lifecare_pca_infusion_system:-:*:*:*:*:*:*:*","matchCriteriaId":"BC81FC0C-02D8-4BD7-83EB-7E510D241A50"}]}]}],"references":[{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01","source":"ics-cert@hq.dhs.gov","tags":["Mitigation","Third Party Advisory","US Government Resource"]},{"url":"https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Third Party Advisory","US Government Resource"]}]}}]}