Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2015-3952 Details

Description

Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.5 HIGHVector:CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01 CVEMitigationThird Party AdvisoryUS Government Resource
https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01 [email protected]MitigationThird Party AdvisoryUS Government Resource

Weakness Enumeration

CWE-IDCWE NameSource
CWE-200Exposure of Sensitive Information to an Unauthorized Actor[email protected]
CWE-312Cleartext Storage of Sensitive Information[email protected]

Affected Products

ProductVersions

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2015-3952
NVD Published Date:
Mar 25, 2019
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2015-3952 Details - Not Deferred