https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T03:07:05.828015+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-04015 cnvd-2015-04015 2026-10-08T03:07:05.833675+00:00 cnvd-2015-04015 https://cve.radiocsirt.org/vuln/euvd-2026-92355 EUVD-2026-92355 2026-10-08T03:07:05.833715+00:00 EUVD-2026-92355 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3956 fkie_cve-2015-3956 2026-10-08T03:07:05.833730+00:00

Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host network. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.

 https://cve.radiocsirt.org/vuln/ghsa-2vhp-v3rh-j2qr GHSA-2vhp-v3rh-j2qr 2026-10-08T03:07:05.833788+00:00

Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host network. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.

 https://cve.radiocsirt.org/vuln/gsd-2015-3956 gsd-2015-3956 2026-10-08T03:07:05.833807+00:00 gsd-2015-3956 https://cve.radiocsirt.org/vuln/icsa-15-161-01 ICSA-15-161-01 — Hospira Plum A+ and Symbiq Infusion Systems Vulnerabilities 2026-10-08T03:07:05.833817+00:00

Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors. Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion…