6.8
CVE-2023-30560
- EPSS 0.3%
- Veröffentlicht 13.07.2023 19:15:09
- Zuletzt bearbeitet 21.11.2024 08:00:25
- CVE-Watchlists
- Unerledigt
LoginPCU Configuration Lacks Authentication
The configuration from the PCU can be modified without authentication using physical connection to the PCU.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Bd ≫ Alaris 8015 Pcu Firmware Version <= 12.1.3
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.222 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 6.8 | 0.9 | 5.9 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| cybersecurity@bd.com | 6.8 | 0.9 | 5.9 |
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-287 Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx