CVE-2016-8355

CVE-2016-8355 describes a critical privilege escalation vulnerability in Smiths-Medical CADD-Solis Medication Safety Software versions 1.0 through 3.1. An authenticated user can gain elevated privileges on the SQL database, enabling them to modify drug libraries, manage users, and alter permissions. With a CVSS score of 9.9 (CRITICAL), this vulnerability has a network attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While physical access to the pump is required for drug library updates, the software vulnerability itself is remotely exploitable. There is no known active exploitation, public exploit code, or KEV listing, but it has garnered significant community discussion.