Alaris 8015 Pcu Firmware Security Vulnerabilities - 2023

CVE-2023-30559

The firmware update package for the wireless card is not properly signed and can be modified.

CVE-2023-30560

The configuration from the PCU can be modified without authentication using physical connection to the PCU.

CVE-2023-30561

The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running.