CVE-2015-3965

Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function.

• CWE-264

• https://ics-cert.us-cert.gov/advisories/ICSA-15-174-01Third Party Advisory, US Government Resource
• https://ics-cert.us-cert.gov/advisories/ICSA-15-174-01Third Party Advisory, US Government Resource

Published

Mar 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-3959The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum…
• CVE-2015-3960The firmware in MNS before 4.5.6 on Belden GarrettCom Magnum…
• CVE-2015-3961The web-server component in MNS before 4.5.6 on Belden Garre…
• CVE-2015-3962Schneider Electric StruxureWare Building Expert MPM before 2…
• CVE-2015-3963Wind River VxWorks before 5.5.1, 6.5.x through 6.7.x before …
• CVE-2015-3964SMA Solar Sunny WebBox has hardcoded passwords, which makes …
• CVE-2015-3966The IPsec SA establishment process on Innominate mGuard devi…
• CVE-2015-3967Cross-site request forgery (CSRF) vulnerability on Janitza U…
• CVE-2015-3968The FTP service on Janitza UMG 508, 509, 511, 604, and 605 d…
• CVE-2015-3969Janitza UMG 508, 509, 511, 604, and 605 devices allow remote…
• CVE-2015-3970Multiple cross-site scripting (XSS) vulnerabilities in the w…
• CVE-2015-3971The debug interface on Janitza UMG 508, 509, 511, 604, and 6…