CVE-2023-30559
5.7
Vector
CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
Exploitability: 0.9 / Impact: 4.7
Source: NVD
Description
The firmware update package for the wireless card is not properly signed and can be modified.
Affected (1)
Products: Bd: Alaris 8015 Pcu Firmware
Configuration A
| Vulnerable Software | Affected Versions |
|---|---|
| Up to 12.1.3 |
| Running on/with | Platform Versions |
|---|---|
Bd Alaris 8015 Pcu | All versions |
Related CWEs
CWE-20
Improper Input Validation
The product receives input or data, but it does
not validate or incorrectly validates that the input has the
properties that are required to process the data safely and
correctly.
CWE-287
Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
CWE-345
Insufficient Verification of Data Authenticity
The product does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.
References (2)
Source: cybersecurity@bd.com
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Timeline
No history available yet.