CVE-2014-5405
Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.
- EPSS
- 2.3% chance of exploitation in the next 30 days; higher than 83% of CVEs (scores of 2026-10-31)
- CWEs
- CWE-259, CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- hospira:mednet