CVE-2016-8355

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.49%

Published

Feb 13, 2017

Modified

May 12, 2026

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

An issue was discovered in Smiths-Medical CADD-Solis Medication Safety Software, Version 1.0; 2.0; 3.0; and 3.1. CADD-Solis Medication Safety Software grants an authenticated user elevated privileges on the SQL database, which would allow an authenticated user to modify drug libraries, add and delete users, and change user permissions. According to Smiths-Medical, physical access to the pump is required to install drug library updates.

Weaknesses (CWE)

CWE-306

Affected Products (4)

smiths-medical · cadd-solis_medication_safety_softwarevulnerable

References (4)

http://www.securityfocus.com/bid/94630

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSMA-16-306-01

Third Party AdvisoryUS Government Resource

http://www.securityfocus.com/bid/94630

Third Party AdvisoryVDB Entry

https://ics-cert.us-cert.gov/advisories/ICSMA-16-306-01

Third Party AdvisoryUS Government Resource

KEV Catalog EPSS Scores Vendors All CVEs