bd vulnerabilities

Recent CVEs affecting bd products. 17 tracked.

bd has 17 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 9. Most recent: 2023-11-28. Highest priority: CVE-2023-30563 (score 38/100).

CVE-2023-30565 LOW 3.5 UPGRADE An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an a
CVE-2023-30564 MEDIUM 6.9 UPGRADE Alaris Systems Manager does not perform input validation during the Device Import Function.
CVE-2023-30563 HIGH 8.2 UPGRADE A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.
CVE-2023-30562 MEDIUM 6.7 UPGRADE A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs
CVE-2023-30561 MEDIUM 6.1 UPGRADE The data flowing between the PCU and its modules is insecure
CVE-2023-30560 MEDIUM 6.8 UPGRADE The configuration from the PCU can be modified without authentication using physical connection to the PCU
CVE-2023-30559 MEDIUM 5.2 UPGRADE The firmware update package for the wireless card is not properly signed and can be modified.
CVE-2023-29066 LOW 3.2 DOWNGRADE The FACSChorus software does not properly assign data access privileges for operating system user accounts
CVE-2023-29065 MEDIUM 4.1 DOWNGRADE The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user
CVE-2023-29064 MEDIUM 4.1 DOWNGRADE The FACSChorus software contains sensitive information stored in plaintext
CVE-2023-29063 LOW 2.4 DOWNGRADE The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow
CVE-2023-29062 LOW 3.8 DOWNGRADE The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user cre
CVE-2023-29061 MEDIUM 5.2 DOWNGRADE There is no BIOS password on the FACSChorus workstation
CVE-2023-29060 MEDIUM 5.4 DOWNGRADE The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports
CVE-2022-47376 HIGH 7.3 UPGRADE The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the inst
CVE-2022-43557 MEDIUM 5.3 MITIGATE MITIGATE The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface
CVE-2022-40263 MEDIUM 6.6 UPGRADE BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials

FAQ

How do I fix bd vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is bd being exploited right now?

None of the tracked bd CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which bd CVE should I patch first?

CVE-2023-30563 currently ranks highest (38/100): A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session..

Products

RSS feed for bd · ← Back to latest CVEs