CVE-2017-12721

5.9 mediumEPSS 0.7%

Medium (5.9) in smiths-medical medfusion 4000 wireless syringe infusion pump. EPSS 0.7% chance of exploitation in the next 30 days.

An Improper Certificate Validation issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. The pump does not validate host certificates, leaving the pump vulnerable to a man-in-the-middle (MITM) attack.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-295
Published: 2018-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

smiths-medical:medfusion_4000_wireless_syringe_infusion_pump

References

http://www.securityfocus.com/bid/100665
https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A
http://www.securityfocus.com/bid/100665
https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A

Check your stack JSON