CVE-2015-7909: Hospira Communication Engine

High severity, CVSS 7.3. EPSS: 1.1% chance of exploitation in the next 30 days.

Stack-based buffer overflow in Hospira Communication Engine (CE) before 1.2 in LifeCare PCA Infusion System 5.07, Plum A+ Infusion System 13.40, and Plum A+3 Infusion System 13.40 allows remote attackers to cause a denial of service or possibly have unspecified other impact via traffic on TCP port 5000.

Affected products

• Hospira Communication Engine: up to and including 1.0
• Hospira Lifecare Pca Infusion System

Published 2016-01-22. Last modified 2026-06-17.