CVE-2015-3459

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands.

• CWE-264

• http://hextechsecurity.com/?p=123Broken Link
• http://imgur.com/CEAnZjjNot Applicable
• http://imgur.com/JHiWSqdNot Applicable
• http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htmThird Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/74414Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01Third Party Advisory, US Government Resource
• https://twitter.com/dyngnosis/status/592671049487142913Press/Media Coverage
• https://twitter.com/dyngnosis/status/592743461977219072Press/Media Coverage
• http://hextechsecurity.com/?p=123Broken Link
• http://imgur.com/CEAnZjjNot Applicable
• http://imgur.com/JHiWSqdNot Applicable
• http://www.fda.gov/MedicalDevices/Safety/AlertsandNotices/ucm446809.htmThird Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/74414Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-15-125-01Third Party Advisory, US Government Resource
• https://twitter.com/dyngnosis/status/592671049487142913Press/Media Coverage
• https://twitter.com/dyngnosis/status/592743461977219072Press/Media Coverage

Published

Apr 29, 2015

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3451The _clone function in XML::LibXML before 2.0119 does not pr…
• CVE-2015-3454TelescopeJS before 0.15 leaks user bcrypt password hashes in…
• CVE-2015-3455Squid 3.2.x before 3.2.14, 3.3.x before 3.3.14, 3.4.x before…
• CVE-2015-3456The Floppy Disk Controller (FDC) in QEMU, as used in Xen 4.5…
• CVE-2015-3457Magento Community Edition (CE) 1.9.1.0 and Enterprise Editio…
• CVE-2015-3458The fetchView function in the Mage_Core_Block_Template_Zend …
• CVE-2015-3569Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-3571Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-3572Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-3591Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultI…
• CVE-2015-3610The Siemens HomeControl for Room Automation application befo…
• CVE-2015-3611A Command Injection vulnerability exists in FortiManager 5.2…8.8