Skip to content
CVE PROGRAM SOURCE RECORD6.1 Medium

CVE-2023-30561

Lack of Cryptographic Security of IUI Bus

Description

The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Becton Dickinson & Co BD Alarisâ„¢ Point-of-Care Unit (PCU) Model 8015

Default version status: unaffected

  • 0 to ≤ 12.1.3affected

References