CVE-2016-8355

CRITICAL

Smiths-Medical CADD-Solis Medication Safety Software - Privilege Es...

Title source: llm

Description

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and delete users, and change user permissions. According to Smiths-Medical, physical access to the pump is required to install drug library updates.

References (2)

Core 2

Core References

Third Party Advisory, US Government Resource x_refsource_misc

https://ics-cert.us-cert.gov/advisories/ICSMA-16-306-01

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/94630

Scores

CVSS v3 9.9

EPSS 0.0149

EPSS Percentile 70.9%

Attack Vector NETWORK

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Details

CWE

CWE-306

Status published

Products (5)

n/a/Smiths-Medical CADD-Solis Medication Safety Software through 3.1 Smiths-Medical CADD-Solis Medication Safety Software through 3.1

smiths-medical/cadd-solis_medication_safety_software 1.0

smiths-medical/cadd-solis_medication_safety_software 2.0

smiths-medical/cadd-solis_medication_safety_software 3.0

smiths-medical/cadd-solis_medication_safety_software 3.1

Published Feb 13, 2017

Tracked Since Feb 18, 2026