Description
The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Becton Dickinson & Co | BD Alarisâ„¢ Point-of-Care Unit (PCU) Model 8015 | ≤ 12.1.3 | — |
Advisories 1
- ICSMA-23-194-01 BD Alaris System with Guardrails Suite MX CISA ICS & IT advisories · Oct 26, 2023