CVE-2014-5405
Hospira MedNet Use of Hard-coded Password
Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.
Exploit likelihood
What each source reports
CVE List Score used
Hospira MedNet Use of Hard-coded Password
Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.
- Record
CVE-2014-5405- CVSS 2.0
- 9.0
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-259
- Updated
- 2026-11-02
EUVDEUVD-2014-5293
Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.
- Record
EUVD-2014-5293- CVSS 2.0
- 9.0 Critical
AV:N/AC:L/Au:S/C:C/I:C/A:C - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-m3j7-7x7f-j7pf No score
Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database...
Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.
- Record
GHSA-m3j7-7x7f-j7pf- Weakness
- CWE-200, CWE-259
- Updated
- 2026-11-02
NVD
Hospira MedNet before 6.1 uses a hardcoded cleartext password to control SQL database authorization, which allows remote authenticated users to bypass intended access restrictions by leveraging knowledge of this password.
- Record
CVE-2014-5405- CVSS 2.0
- 9.0 High
AV:N/AC:L/Au:S/C:C/I:C/A:C - Weakness
- CWE-259, CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | CVE List, EUVD, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-5405 is a vulnerability (CVSS 9.0) in Hospira Mednet, published April 3, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.33%, the 83rd percentile. No source names a fixed version.