Vendor
Becton Dickinson & Co
8 known vulnerabilities.
Products
BD Alarisâ„¢ Systems Manager 2
BD Alarisâ„¢ Point-of-Care Unit (PCU) Model 8015 2
BD BACTEC™ Blood Culture System 1
BD COR™ System 1
BD EpiCenter™ Microbiology Data Management System 1
BD MAX™ System 1
BD Phoenix™ M50 Automated Microbiology System 1
BD Synapsys™ Informatics Solution 1
CQI Reporter 1
BD Alarisâ„¢ Guardrailsâ„¢ Editor 1
BD Alaris™ Point-of-Care Unit (PCU) Model 8015 1
4 results · Clear filters · Feed
-
Medium 6.9
Stored Cross-Site Scripting on Device Import Functionality
Alaris Systems Manager does not perform input validation during the Device Import Function.
-
Medium 6.1
Lack of Cryptographic Security of IUI Bus
The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.
-
Medium 6.8
PCU Configuration Lacks Authentication
The configuration from the PCU can be modified without authentication using physical connection to the PCU.
-
Medium 5.2
Wireless Card Firmware Improperly Signed
The firmware update package for the wireless card is not properly signed and can be modified.