CVE-2017-12722: An Out-of-bounds Read issue was discovered in Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pump,...

Security readout for executives and security teams

CVE-2017-12722 affects Smiths Medical Medfusion 4000 wireless syringe infusion pumps running versions 1.1, 1.5, and 1.6. A software component can read memory outside its expected bounds and crash the communications module. Smiths Medical assessed that therapy delivery is not impacted, but loss of communications can still disrupt monitoring, workflows, or device management. Exposure is limited to organizations using Smiths Medical Medfusion 4000 Wireless Syringe Infusion Pumps on versions 1.1, 1.5, or 1.6. Risk is higher where pump communications are reachable from broad clinical, corporate, or wireless networks. Prioritize this for healthcare environments with Medfusion 4000 deployments, especially if pumps depend on wireless communications. The cited impact is not therapy interruption, but communications loss in clinical devices can create operational and monitoring risk. Mitigation focus: Inventory Medfusion 4000 pumps and firmware versions.; Check Smiths Medical and CISA guidance for approved remediation.; Limit pump communications to trusted clinical networks..

Prepared

Jun 7, 2026, 14:40 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.