CVE-2017-12721 - An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6

Back Back to CVE browser

MEDIUM

An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6

Published Feb 15, 2018

5.9

MEDIUM

CVSS 3.0

EPSS 0.67%

Description

An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle (MITM) attack.

Affected products

Vendor n/a Product Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump Default
n/a
- Version
  Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump

n/a

Version	Status	Constraints
Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-295

Improper Certificate Validation

References (3)

http://www.securityfocus.com/bid/100665
vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4260
Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A
x_refsource_MISCThird Party AdvisoryUS Government Resource

Link	Providers	Tags
http://www.securityfocus.com/bid/100665		vdb-entryx_refsource_BIDThird Party AdvisoryVDB Entry
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-4260		Advisory
https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A		x_refsource_MISCThird Party AdvisoryUS Government Resource