Lucene search
HistoryJul 13, 2023 - 6:15 p.m.
CVE-2023-30559
wireless card
firmware update
not properly signed
modification
CVSS3
5.7
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
EPSS
0
Percentile
12.7%
The firmware update package for the wireless card is not properly signed and can be modified.
Affected configurations
Node
bdalaris_8015_pcuMatch-
bdalaris_8015_pcu_firmwareRange≤12.1.3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| bd | alaris_8015_pcu | - | cpe:2.3:h:bd:alaris_8015_pcu:-:*:*:*:*:*:*:* |
| bd | alaris_8015_pcu_firmware | * | cpe:2.3:o:bd:alaris_8015_pcu_firmware:*:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2023-30559 Wireless Card Firmware Improperly Signed
2023-07-13 17:50:13
cve
cve
CVE-2023-30559
2023-07-13 18:15:09
prion
prion
Design/Logic Flaw
2023-07-13 18:15:00
ics
ics
BD Alaris System with Guardrails Suite MX (Update A)
2023-10-26 12:00:00
CVSS3
5.7
Attack Vector
PHYSICAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
EPSS
0
Percentile
12.7%
Related for NVD:CVE-2023-30559