CVE-2014-5420 CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded application password, which makes it easier for remote authenticated users to obtain application-file access vi...
LowCVSS 3.5
EPSS 0.93%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded application password, which makes it easier for remote authenticated users to obtain application-file access via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| carefusion pyxis supplystation | = 8.1 | No fix listed |
References
- ics-cert.us-cert.gov us-government-resource