Lucene search
BDCVELIST:CVE-2023-30559HistoryJul 13, 2023 - 5:50 p.m.
CVE-2023-30559 Wireless Card Firmware Improperly Signed
2023-07-1317:50:13
CWE-345
CWE-20
BD
www.cve.org
5
cve-2023-30559
wireless card
firmware
improperly signed
CVSS3
5.2
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
AI Score
6
Confidence
High
EPSS
0
Percentile
12.7%
The firmware update package for the wireless card is not properly signed and can be modified.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "BD Alaris™ Point-of-Care Unit (PCU) Model 8015",
"vendor": "Becton Dickinson & Co ",
"versions": [
{
"lessThanOrEqual": "12.1.3",
"status": "affected",
"version": "0",
"versionType": "custom"
}
]
}
]Related
nvd
nvd
CVE-2023-30559
2023-07-13 18:15:09
cve
cve
CVE-2023-30559
2023-07-13 18:15:09
prion
prion
Design/Logic Flaw
2023-07-13 18:15:00
ics
ics
BD Alaris System with Guardrails Suite MX (Update A)
2023-10-26 12:00:00
CVSS3
5.2
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H
AI Score
6
Confidence
High
EPSS
0
Percentile
12.7%
Related for CVELIST:CVE-2023-30559