Riskcovery

CVE-2017-12726

State
Published
Severity
Not scored
Published
Feb 15, 2018
Updated
Aug 5, 2024
Reserved
Aug 9, 2017

Read the record on cve.org

Description

A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that it is not possible to upload files via Telnet and the impact of this vulnerability is limited to the communications module.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pumpn/a
  • Smiths Medical Medfusion 4000 Wireless Syringe Infusion PumpAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.