CVE-2017-12726

7.3 highEPSS 1.1%

High (7.3) in smiths-medical medfusion 4000 wireless syringe infusion pump. EPSS 1.1% chance of exploitation in the next 30 days.

A Use of Hard-coded Password issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump, Version 1.1, 1.5, and 1.6. Telnet on the pump uses hardcoded credentials, which can be used if the pump is configured to allow external communications. Smiths Medical assesses that it is not possible to upload files via Telnet and the impact of this vulnerability is limited to the communications module.

Severity

CVSS 3.0

7.3 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 65% of CVEs (scores of 2026-10-31)
CWE: CWE-798
Published: 2018-02-15
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

smiths-medical:medfusion_4000_wireless_syringe_infusion_pump

References

http://www.securityfocus.com/bid/100665
https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A
http://www.securityfocus.com/bid/100665
https://ics-cert.us-cert.gov/advisories/ICSMA-17-250-02A

Check your stack JSON