BD

Latest CVEs · RSS

• CVE-2024-10476 2024-12-17 · CVSS 8.0
  Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, inc
• CVE-2023-29066 2023-11-28 · CVSS 3.2
  The FACSChorus software does not properly assign data access privileges for operating system user accounts. A non-administrative OS account can modify informati
• CVE-2023-29065 2023-11-28 · CVSS 4.1
  The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user. A threat actor with physical access could potenti
• CVE-2023-29064 2023-11-28 · CVSS 4.1
  The FACSChorus software contains sensitive information stored in plaintext. A threat actor could gain hardcoded secrets used by the application, which include t
• CVE-2023-29063 2023-11-28 · CVSS 2.4
  The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for
• CVE-2023-29062 2023-11-28 · CVSS 3.8
  The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately valid
• CVE-2023-29061 2023-11-28 · CVSS 5.2
  There is no BIOS password on the FACSChorus workstation. A threat actor with physical access to the workstation can potentially exploit this vulnerability to ac
• CVE-2023-29060 2023-11-28 · CVSS 5.4
  The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports. If exploited, a threat actor with physical access to
• CVE-2023-30565 2023-07-13 · CVSS 3.5
  An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker.
• CVE-2023-30564 2023-07-13 · CVSS 6.9
  Alaris Systems Manager does not perform input validation during the Device Import Function.
• CVE-2023-30563 2023-07-13 · CVSS 8.2
  A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.
• CVE-2023-30562 2023-07-13 · CVSS 6.7
  A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs.
• CVE-2023-30561 2023-07-13 · CVSS 6.1
  The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially
• CVE-2023-30560 2023-07-13 · CVSS 6.8
  The configuration from the PCU can be modified without authentication using physical connection to the PCU.
• CVE-2023-30559 2023-07-13 · CVSS 5.2
  The firmware update package for the wireless card is not properly signed and can be modified.
• CVE-2022-47376 2023-06-13
  The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the
• CVE-2022-43557 2022-12-05 · CVSS 5.3
  The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specia
• CVE-2022-40263 2022-11-04 · CVSS 6.6
  BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensiti
• CVE-2022-30277 2022-06-01 · CVSS 5.7
  BD Synapsys™, versions 4.20, 4.20 SR1, and 4.30, contain an insufficient session expiration vulnerability. If exploited, threat actors may be able to access, mo
• CVE-2022-22767 2022-06-01 · CVSS 8.8
  Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxi
• CVE-2022-22765 2022-02-12 · CVSS 8.0
  BD Viper LT system, versions 2.0 and later, contains hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive inform
• CVE-2022-22766 2022-02-11 · CVSS 7.0
  Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could pot