Read the docs

Becton, Dickinson and Company (BD)

Records34All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Becton, Dickinson and Company (BD) records in CISA KEV

No Becton, Dickinson and Company (BD) vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Facschorus 7 records LOW Alaris 8015 Pcu Firmware 4 records LOW Alaris Systems Manager 3 records LOW Performa 3 records MEDIUM Pyxis Anesthesia Station Es Firmware 3 records LOW Pyxis Medstation Es Firmware 3 records LOW Alaris 8015 Pc Unit 2 records LOW Alaris Gateway Workstation Firmware 2 records MEDIUM

Records

7 records in Facschorus · all components

TI-2023-13510 CVE-2023-29060 · GHSA-q8hh-f4g3-p688

Lack of USB Whitelisting

Priority LOW 25

The FACSChorus workstation operating system does not restrict what devices can interact with its USB ports.

CVSS 3.1MEDIUM 5.7 Physical No auth No interaction EPSS 0.003 Published 2023-11-28 No fix listed CWE-1299
TI-2023-13511 CVE-2023-29061 · GHSA-5mf3-992w-8xcp

Lack of Adequate BIOS Authentication

Priority LOW 24

There is no BIOS password on the FACSChorus workstation.

CVSS 3.1MEDIUM 5.2 Physical No auth No interaction EPSS 0.00378 Published 2023-11-28 No fix listed CWE-306
TI-2023-13515 CVE-2023-29065 · GHSA-3gxr-jgff-j84x

Overly Permissive Access Policy

Priority LOW 20

The FACSChorus software database can be accessed directly with the privileges of the currently logged-in user.

CVSS 3.1MEDIUM 4.3 Physical No auth No interaction EPSS 0.00274 Published 2023-11-28 No fix listed CWE-277
TI-2023-13514 CVE-2023-29064 · GHSA-5xgp-vqrr-cm5v

Hardcoded Secrets

Priority LOW 20

The FACSChorus software contains sensitive information stored in plaintext.

CVSS 3.1MEDIUM 4.3 Physical No auth No interaction EPSS 0.00274 Published 2023-11-28 No fix listed CWE-798
TI-2023-13512 CVE-2023-29062 · GHSA-j4p2-5m4c-gvpm

Unsecure Identity Verification

Priority LOW 18

The Operating System hosting the FACSChorus application is configured to allow transmission of hashed user credentials upon user action without adequately validating the identity of the requested resource.

CVSS 3.1LOW 3.8 Adjacent network No auth User interaction EPSS 0.00297 Published 2023-11-28 No fix listed CWE-287
TI-2023-13516 CVE-2023-29066 · GHSA-42p3-688q-33p6

Incorrect User Management

Priority LOW 16

The FACSChorus software does not properly assign data access privileges for operating system user accounts.

CVSS 3.1LOW 3.5 Physical No auth No interaction EPSS 0.00271 Published 2023-11-28 No fix listed CWE-266
TI-2023-13513 CVE-2023-29063 · GHSA-3fjc-956c-32mf

Lack of DMA Access Protections

Priority LOW 14

The FACSChorus workstation does not prevent physical access to its PCI express (PCIe) slots, which could allow a threat actor to insert a PCI card designed for memory capture.

CVSS 3.1LOW 2.4 Physical No auth No interaction EPSS 0.0018 Published 2023-11-28 No fix listed CWE-1299
Open these records in search →