8.5
CVE-2016-8358
- EPSS 0.5%
- Veröffentlicht 13.02.2017 22:59:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Quelle ics-cert@hq.dhs.gov
- CVE-Watchlists
- Unerledigt
LoginAn issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between endpoints.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Smiths-medical ≫ Cadd-solis Medication Safety Software Version1.0
Smiths-medical ≫ Cadd-solis Medication Safety Software Version2.0
Smiths-medical ≫ Cadd-solis Medication Safety Software Version3.0
Smiths-medical ≫ Cadd-solis Medication Safety Software Version3.1
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.5% | 0.387 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.5 | 1.8 | 6 |
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
|
| nvd@nist.gov | 6 | 6.8 | 6.4 |
AV:N/AC:M/Au:S/C:P/I:P/A:P
|
CWE-346 Origin Validation Error
The product does not properly verify that the source of data or communication is valid.
http://www.securityfocus.com/bid/94630
https://ics-cert.us-cert.gov/advisories/ICSMA-16-306-01