CVE-2023-30561 — Lack of Cryptographic Security of IUI Bus

CVE-2023-30561

Lack of Cryptographic Security of IUI Bus PUBLISHED

Description (CNA)

The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.

Affected (CNA)

Vendor / product	Versions
Becton Dickinson & Co / BD Alarisâ„¢ Point-of-Care Unit (PCU) Model 8015	affected 0 through 12.1.3

CWE

CWE-311

References

https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx

ADP enrichment

CVE

No English description supplied.

https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx

CISA-ADP

No English description supplied.

No references supplied.