CVE-2015-3958: Hospira LifeCare PCA Infusion System 5.0 and earlier, and possibly other versions, allows remote attackers...

Security readout for executives and security teams

CVE-2015-3958 is a denial-of-service issue in Hospira LifeCare PCA Infusion System 5.0 and earlier, possibly other versions. A flood of TCP packets can force the device into a state requiring manual reboot. For hospitals, the concern is disruption of infusion availability, not data theft or remote code execution based on the provided sources. Exposure is most relevant where affected Hospira LifeCare PCA infusion systems are connected to reachable clinical, biomedical, or hospital networks. Internet exposure is not stated in the sources and should not be assumed. Treat this as a patient-care availability risk requiring biomedical and network coordination. Priority is highest for facilities with affected devices on broad or poorly segmented networks. No active exploitation is established in the provided sources. Mitigation focus: Identify any Hospira LifeCare PCA systems at version 5.0 or earlier.; Review FDA, ICS-CERT, and vendor guidance for approved mitigations or updates.; Restrict network access to infusion systems to required clinical management paths..

Prepared

Jun 13, 2026, 22:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.