CVE-2014-5406

Name of the Vulnerable Software and Affected Versions Hospira LifeCare PCA Infusion System versions prior to 7.0

Description The issue concerns the lack of validation of network traffic related to certain system updates or changes, allowing remote attackers to modify settings or medication data. This can be achieved via packets on various ports, including TELNET, HTTP, HTTPS, or UPNP.

Recommendations For versions prior to 7.0, update to version 7.0 or later to resolve the issue.