GCVE - cpe:2.3:a:hospira:plum_a+3_infusion_system:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:hospira:plum_a+3_infusion_system:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Hospira (`c0d9e8bb-f70a-5b1e-b62f-95531b009d1a`)
Product	Plum A+3 Infusion System (`2e7cf312-045e-5813-af62-4a29ecc3423a`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-3956`	vulnerable	2026-06-08 05:06:38.883089	Details available Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior accept drug libraries, firmware updates, pump commands, and unauthorized configuration changes from unauthenticated devices on the host network. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Published: 2019-03-25T17:44:44.000Z Updated: 2024-08-06T06:04:02.927Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3954`	vulnerable	2026-06-08 05:06:38.882054	Details available Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior give unauthenticated users root privileges on Port 23/TELNET by default. An unauthorized user could issue commands to the pump. Hospira recommends that customers close Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Published: 2019-03-25T16:12:01.000Z Updated: 2024-08-06T06:04:01.128Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3953`	vulnerable	2026-06-08 05:06:38.881536	Details available Hard-coded accounts may be used to access Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Published: 2019-03-25T16:02:25.000Z Updated: 2024-08-06T06:04:00.957Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-3952`	vulnerable	2026-06-08 05:06:38.877061	Details available Wireless keys are stored in plain text on Hospira Plum A+ Infusion System version 13.4 and prior, Plum A+3 Infusion System version 13.6 and prior, and Symbiq Infusion System, version 3.13 and prior. Hospira recommends that customers close Port 20/FTP and Port 23/TELNET on the affected devices. Hospira has also released the Plum 360 Infusion System which is not vulnerable to this issue. Published: 2019-03-25T15:42:39.000Z Updated: 2024-08-06T06:04:01.121Z Open on db.gcve.eu Reference links https://ics-cert.us-cert.gov/advisories/ICSA-15-161-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.