5.3

CVE-2022-43557

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bd ≫ Bodyguard 999-603 Firmware Version-
   Bd ≫ Bodyguard 999-603 Version-
Bd ≫ Bodyguard Duo 999-903 Firmware Version-
   Bd ≫ Bodyguard Duo 999-903 Version-
Bd ≫ Bodyguard T 999-103 Firmware Version-
   Bd ≫ Bodyguard T 999-103 Version-
Bd ≫ Bodyguard 121 Twins Firmware Version-
   Bd ≫ Bodyguard 121 Twins Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.11% 0.294
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5.3 0.5 4.7
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
cybersecurity@bd.com 5.3 0.5 4.7
CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H
CWE-1299 Missing Protection Mechanism for Alternate Hardware Interface

The lack of protections on alternate paths to access control-protected assets (such as unprotected shadow registers and other external facing unguarded interfaces) allows an attacker to bypass existing protections to the asset that are only performed against the primary path.

CWE-287 Improper Authentication

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.