CVE-2015-3459: Hospira Lifecare PCA3

High severity, CVSS 10.0. EPSS: 5.1% chance of exploitation in the next 30 days.

The communication module on the Hospira LifeCare PCA Infusion System before 7.0 does not require authentication for root TELNET sessions, which allows remote attackers to modify the pump configuration via unspecified commands.

Affected products

• Hospira Lifecare PCA3
• Hospira Lifecare PCA5
• Hospira Lifecare Pcainfusion Firmware: up to and including 5.0

Published 2015-04-29. Last modified 2026-06-17.