CVE-2015-3965

8.8 highEPSS 2.9%

High (8.8) in pfizer symbiq infusion system firmware. EPSS 2.9% chance of exploitation in the next 30 days.

Hospira Symbiq Infusion System 3.13 and earlier allows remote authenticated users to trigger "unanticipated operations" by leveraging "elevated privileges" for an unspecified call to an incorrectly exposed function.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 2.9% chance of exploitation in the next 30 days; higher than 86% of CVEs (scores of 2026-10-31)
CWE: CWE-264
Published: 2019-03-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

pfizer:symbiq_infusion_system_firmware

References

https://ics-cert.us-cert.gov/advisories/ICSA-15-174-01
https://ics-cert.us-cert.gov/advisories/ICSA-15-174-01

Check your stack JSON