Vulnerabilities (CVE)

Filtered by vendor Smiths-medical Subscribe
Filtered by product Cadd-solis Medication Safety Software
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-8355 1 Smiths-medical 1 Cadd-solis Medication Safety Software 2023-12-10 9.0 HIGH 9.9 CRITICAL
An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and delete users, and change user permissions. According to Smiths-Medical, physical access to the pump is required to install drug library updates.
CVE-2016-8358 1 Smiths-medical 1 Cadd-solis Medication Safety Software 2023-12-10 6.0 MEDIUM 8.5 HIGH
An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. The affected software does not verify the identities at communication endpoints, which may allow a man-in-the-middle attacker to gain access to the communication channel between endpoints.