Lucene search

BDCVE-2023-30565

HistoryJul 13, 2023 - 8:15 p.m.

CVE-2023-30565

2023-07-1320:15:09

CWE-924

CWE-319

web.nvd.nist.gov

cve-2023-30565

systems manager

cqi reporter

insecure connection

infusion data

attacker

nvd

CVSS3

3.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

9.0%

JSON

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker.

Affected configurations

Nvd

Node

bdguardrails_cqi_reporterRange≤10.17

VendorProductVersionCPE
bdguardrails_cqi_reporter*cpe:2.3:a:bd:guardrails_cqi_reporter:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bd	guardrails_cqi_reporter	*	cpe:2.3:a:bd:guardrails_cqi_reporter::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "CQI Reporter",
    "vendor": "Becton Dickinson & Co",
    "versions": [
      {
        "lessThanOrEqual": "10.17",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx

CVSS3

3.5

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

AI Score

4.2

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-30565