https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:26:16.000051+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2015-04011 cnvd-2015-04011 2026-10-08T06:26:16.088868+00:00 cnvd-2015-04011 https://cve.radiocsirt.org/vuln/euvd-2026-92223 EUVD-2026-92223 2026-10-08T06:26:16.088911+00:00 EUVD-2026-92223 https://cve.radiocsirt.org/vuln/fkie_cve-2015-3954 fkie_cve-2015-3954 2026-10-08T06:26:16.088927+00:00

Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.

 https://cve.radiocsirt.org/vuln/ghsa-x5v7-rmgq-cm8v GHSA-x5v7-rmgq-cm8v 2026-10-08T06:26:16.088961+00:00

Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue.

 https://cve.radiocsirt.org/vuln/gsd-2015-3954 gsd-2015-3954 2026-10-08T06:26:16.088979+00:00 gsd-2015-3954 https://cve.radiocsirt.org/vuln/icsa-15-161-01 ICSA-15-161-01 — Hospira Plum A+ and Symbiq Infusion Systems Vulnerabilities 2026-10-08T06:26:16.088991+00:00

Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Stack-based buffer overflow in Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers to execute arbitrary code via unspecified vectors. Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion…