5.3
CVSSv3

CVE-2017-12722

Published: 15/02/2018 Updated: 02/03/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 5.3 | Impact Score: 1.4 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

An Out-of-bounds Read issue exists in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump reads memory out of bounds, causing the communications module to crash. Smiths Medical assesses that the crash of the communications module would not impact the operation of the therapeutic module.

Vulnerable Product Search on Vulmon Subscribe to Product

smiths-medical medfusion_4000_wireless_syringe_infusion_pump 1.1

smiths-medical medfusion_4000_wireless_syringe_infusion_pump 1.5

smiths-medical medfusion_4000_wireless_syringe_infusion_pump 1.6