Filtered by vendor Smiths-medical
Subscribe
Filtered by product Cadd-solis Medication Safety Software
Subscribe
Total
2 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2016-8358 | 1 Smiths-medical | 1 Cadd-solis Medication Safety Software | 2017-02-28 | 6.0 MEDIUM | 8.5 HIGH |
An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between endpoints. | |||||
CVE-2016-8355 | 1 Smiths-medical | 1 Cadd-solis Medication Safety Software | 2017-02-28 | 9.0 HIGH | 9.9 CRITICAL |
An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and delete users, and change user permissions. According to Smiths-Medical, physical access to the pump is required to install drug library updates. |