The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although some site installations may choose to store personal data.
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:LBd Alaris Infusion Central
APPBd1.1 – 1.3.2
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Related vulnerabilities
CVE-2019-10959CRITICAL10.0PL ✓same vendor
BD Alaris Gateway Workstation — upload złośliwego firmware bez ograniczeń
CVE-2018-14786CRITICAL9.4PL ✓same vendor
Auth Bypass w pompach strzykawkowych BD Alaris — nieautoryzowany zdalny dostęp
CVE-2017-6022CRITICAL9.8PL ✓same vendor
Hard-coded password w BD PerformA i KLA Journal Service — dostęp do bazy BD Kiestra
CVE-2023-30563HIGH8.2same vendor
A malicious file could be uploaded into a System Manager User Import Function resulting in a hijacked session.
CVE-2022-22767HIGH8.8same vendor
Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these...