CVE-2023-30561

Summary

The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.

Affected Software

VendorProductVersion RangeStatus
Becton Dickinson & CoBD Alarisâ„¢ Point-of-Care Unit (PCU) Model 80150 <= 12.1.3affected

Weaknesses

  • CWE-311: CWE-311 Missing Encryption of Sensitive Data

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References