Hospira — Vulnerabilities & Security Advisories 11

Hospira specializes in pharmaceutical production and medication delivery systems, with vulnerabilities historically spanning remote code execution, cross-site scripting, and privilege escalation. Their devices, including infusion pumps and medication management software, have faced multiple security flaws that could allow unauthorized access or manipulation. Notably, Hospira's Symbiq infusion pump system contained hardcoded credentials and unauthenticated vulnerabilities, prompting FDA advisories. The company maintains 11 CVEs, with many issues relating to network protocols and default configurations that expose critical healthcare infrastructure to potential compromise. Security researchers have repeatedly highlighted risks in their connected medical devices, underscoring persistent challenges in securing IoT-enabled healthcare technology.