Critical severity9.8NVD Advisory· Published Mar 26, 2019· Updated Jun 17, 2026

CVE-2014-5401

Description

Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet software, MedNet 6.1. Existing versions of MedNet can be upgraded to MedNet 6.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Hospira/Mednet3 versions
cpe:2.3:a:hospira:mednet:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:hospira:mednet:*:*:*:*:*:*:*:*range: <=5.8
- (no CPE)range: <=5.8
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

ics-cert.us-cert.gov/advisories/ICSA-15-090-03nvdThird Party AdvisoryUS Government Resource
github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.jsonnvd
www.cisa.gov/news-events/ics-advisories/icsa-15-090-03nvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000