CVE-2017-12723
Last modified
CVE-2017-12723 is a vulnerability of currently unknown severity. A Password in Configuration File issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump stores some passwords in the configuration file, which are accessible if the pump is configured to allow external communications.. EPSS estimates a 0.99% chance of exploitation in the next 30 days.
Description
A Password in Configuration File issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump stores some passwords in the configuration file, which are accessible if the pump is configured to allow external communications.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Smiths-Medical | Medfusion 4000 Wireless Syringe Infusion Pump | 1.1 |
| Smiths-Medical | Medfusion 4000 Wireless Syringe Infusion Pump | 1.5 |
| Smiths-Medical | Medfusion 4000 Wireless Syringe Infusion Pump | 1.6 |
References
- http://www.securityfocus.com/bid/100665Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02AThird Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/100665Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02AThird Party Advisory, US Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-12723?
How severe is CVE-2017-12723?
How do I fix CVE-2017-12723?
Are you affected by CVE-2017-12723?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST