Medium ICSMA-22-335-01 1 CVE

BD BodyGuard Pumps

Published Dec 1, 2022 · Updated Dec 1, 2022

Vendor: Becton, Dickinson and Company (BD) Product: BodyGuard Pumps Product: CME BodyGuard 323 Product: CME BodyGuard 323 Color Vision Product: CME BodyGuard Twins

Summary

Successful exploitation of this vulnerability could allow an attacker to change configuration settings or disable the pump.

Vulnerabilities 1

Medium 5.3

CVE-2022-43557

BD BodyGuard™ Pumps – RS-232 Interface Vulnerability

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected…

Becton, Dickinson and Company (BD) BodyGuard™ Pump

Dec 5, 2022

Revision history

2022-12-01 #1
Publication Date

References

ICS Advisory ICSMA-22-335-01 Web Version
https://www.cisa.gov/news-events/ics-medical-advisories/icsma-22-335-01
Recommended Practices
https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf