CVE-2014-5422 CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded service password, which makes it easier for remote attackers to obtain access via unspecified vectors.
HighCVSS 9.7
EPSS 2.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
CareFusion Pyxis SupplyStation 8.1 with hardware test tool before 1.0.16 has a hardcoded service password, which makes it easier for remote attackers to obtain access via unspecified vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| carefusion pyxis supplystation | = 8.1 | No fix listed |
References
- ics-cert.us-cert.gov us-government-resource