CVE-2014-5401
Hospira MedNet Code Injection
HIGH
10
CVSS Score
Published: March 26, 2019 at 04:21 PM UTC
Updated: June 17, 2026 at 12:11 AM UTC
1 product affected across 1 vendorMednet
Using MedNet by Hospira?
Get instant alerts when new vulnerabilities affect MedNet - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
HIGH10
Exploit prediction
EPSS 5%
Description
Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet software, MedNet 6.1. Existing versions of MedNet can be upgraded to MedNet 6.1.
Remediation
No guide yetNo remediation guidance has been written for this CVE yet, and no fixed version or vendor advisory is recorded against it.
References (3)
Third Party AdvisoryUS Government Resource
Source: [email protected]
https://ics-cert.us-cert.gov/advisories/ICSA-15-090-03Source: cverecord
https://www.cisa.gov/news-events/ics-advisories/icsa-15-090-03CVSS
10HIGHicscert
Vector?
Quick Info
StatusMODIFIED
CWE
CWE-94
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card