An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. A third-party component used in the pump reads memory out of bounds, causing the communications module to crash. Smiths Medical assesses that the crash of the communications module would not impact the operation of the therapeutic module.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/100665 | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/101252 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A | Third Party Advisory US Government Resource |
| http://www.securityfocus.com/bid/100665 | Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/101252 | Third Party Advisory VDB Entry |
| https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A | Third Party Advisory US Government Resource |
Configurations
Configuration 1 (hide)
| AND |
|
History
21 Nov 2024, 03:10
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/100665 - Third Party Advisory, VDB Entry | |
| References | () http://www.securityfocus.com/bid/101252 - Third Party Advisory, VDB Entry | |
| References | () https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A - Third Party Advisory, US Government Resource |
Information
Published : 2018-02-15 10:29
Updated : 2024-11-21 03:10
NVD link : CVE-2017-12722
Mitre link : CVE-2017-12722
CVE.ORG link : CVE-2017-12722
JSON object : View
Products Affected
smiths-medical
- medfusion_4000_wireless_syringe_infusion_pump
CWE
CWE-125
Out-of-bounds Read