Unrated severityNVD Advisory· Published Mar 26, 2019· Updated Nov 3, 2025

Hospira MedNet Code Injection

CVE-2014-5401

Description

Hospira MedNet software version 5.8 and prior uses vulnerable versions of the JBoss Enterprise Application Platform software that may allow unauthenticated users to execute arbitrary code on the target system. Hospira has developed a new version of the MedNet software, MedNet 6.1. Existing versions of MedNet can be upgraded to MedNet 6.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

JBoss/Enterprise Application Platformllm-fuzzy
Hospira/Mednetllm-fuzzy2 versions
<=5.8+ 1 more
- (no CPE)range: <=5.8
- (no CPE)range: 0

Patches

Vulnerability mechanics

References

github.com/cisagov/CSAF/blob/develop/csaf_files/OT/white/2015/icsa-15-090-03.jsonmitre
www.cisa.gov/news-events/ics-advisories/icsa-15-090-03mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.004
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000