Medium ICSMA-20-170-06 1 CVE

BD Alaris PCU (Update A)

Published Jun 18, 2020 · Updated Jun 23, 2020 · Revision 2

Vendor: Becton, Dickinson and Company (BD) Product: Alaris PC Unit

Summary

Successful exploitation of this vulnerability could allow an attacker to cause a denial of service (DoS) on the target system and could cause the BD Alaris PCU to disconnect from the facility 's wireless network.

Vulnerabilities 1

Medium 5.3

CVE-2019-11479 EPSS 91%

Jonathan Looney discovered that the Linux kernel default MSS is hard-coded to 48 bytes. This allows a remote peer to fr…

Linux linux_kernel linux-raspi2 linux-hwe Linux Debian Ubuntu

Jun 18, 2019

Revision history

2020-06-23 #2
ICSMA-20-170-06 BD Alaris PCU (Update A)
2020-06-18 #1
ICSMA-20-170-06 BD Alaris PCU

References

ICS Advisory ICSMA-20-170-06 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-20-170-06
Recommended Practices
https://www.fda.gov/medical-devices/digital-health/cybersecurity
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B