CVE-2014-5403

CVE-2014-5403: Hospira MedNet Use of Hard-coded Cryptographic Key

Vendor Hospira

Product MedNet

Weakness CWE-321

Published April 3, 2015

Last update November 3, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Hospira MedNet before 6.1 uses hardcoded cryptographic keys for protection of data transmission from infusion pumps, which allows remote attackers to obtain sensitive information by sniffing the network.

Key dates

02Disclosure timeline

April 3, 2015 CVE published

November 3, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2014-5403 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/321.html

Related vulnerabilities

04Related CVE

CVE-2026-5455 Dialogue App ca.diagram.dialogue config.json hard-coded key CVE-2021-23842 Use of Hard-coded Cryptographic Key CVE-2025-15105 getmaxun auth.ts hard-coded key CVE-2025-14923 IBM WebSphere Application Server Liberty could provide weaker than expected security CVE-2025-66454 Arcade MCP Default Hardcoded Worker Secret Allows Full Unauthorized Access to All HTTP MCP Worker Endpoints