Becton Dickinson & Co

8 results · Feed

• High 8.0
  CVE-2024-10476

  Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be a…

  Becton Dickinson & Co BD COR™ System BD MAX™ System BD Synapsys™ Informatics Solution
  Dec 17, 2024
• Low 3.5
  CVE-2023-30565

  CQI Data Sniffing

  An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker.

  Becton Dickinson & Co CQI Reporter
  Jul 13, 2023
• Medium 6.9
  CVE-2023-30564

  Stored Cross-Site Scripting on Device Import Functionality

  Alaris Systems Manager does not perform input validation during the Device Import Function.

  Becton Dickinson & Co BD Alarisâ„¢ Systems Manager
  Jul 13, 2023
• High 8.2
  CVE-2023-30563

  Stored Cross-Site Scripting on User Import Functionality

  A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.

  Becton Dickinson & Co BD Alarisâ„¢ Systems Manager
  Jul 13, 2023
• Low 3.0
  CVE-2023-30562

  Lack of Dataset Integrity Checking

  A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs.

  Becton Dickinson & Co BD Alarisâ„¢ Guardrailsâ„¢ Editor
  Jul 13, 2023
• Medium 6.1
  CVE-2023-30561

  Lack of Cryptographic Security of IUI Bus

  The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.

  Becton Dickinson & Co BD Alarisâ„¢ Point-of-Care Unit (PCU) Model 8015
  Jul 13, 2023
• Medium 6.8
  CVE-2023-30560

  PCU Configuration Lacks Authentication

  The configuration from the PCU can be modified without authentication using physical connection to the PCU.

  Becton Dickinson & Co BD Alarisâ„¢ Point-of-Care Unit (PCU) Model 8015
  Jul 13, 2023
• Medium 5.2
  CVE-2023-30559

  Wireless Card Firmware Improperly Signed

  The firmware update package for the wireless card is not properly signed and can be modified.

  Becton Dickinson & Co BD Alaris™ Point-of-Care Unit (PCU) Model 8015
  Jul 13, 2023