CVE Vulnerabilities

CVE-2016-8358

Origin Validation Error

Published: Feb 13, 2017 | Modified: Feb 28, 2017
CVSS 3.x
8.5
HIGH
Source:
NVD
CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS 2.x
6 MEDIUM
AV:N/AC:M/Au:S/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between endpoints.

Weakness

The product does not properly verify that the source of data or communication is valid.

Affected Software

Name Vendor Start Version End Version
Cadd-solis_medication_safety_software Smiths-medical 1.0 (including) 1.0 (including)
Cadd-solis_medication_safety_software Smiths-medical 2.0 (including) 2.0 (including)
Cadd-solis_medication_safety_software Smiths-medical 3.0 (including) 3.0 (including)
Cadd-solis_medication_safety_software Smiths-medical 3.1 (including) 3.1 (including)

References