GCVE - cpe:2.3:o:bd:alaris_8015_pcu_firmware:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:o:bd:alaris_8015_pcu_firmware:*:*:*:*:*:*:*:*

part: o version: * update: *

Vendor	Bd (`fdd6bd7d-aa5e-576b-8074-72967196a90e`)
Product	Alaris 8015 Pcu Firmware (`f65d229f-25c4-5cc7-ab41-2c1b28bb13f2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-30561`	vulnerable	2026-06-08 06:04:39.875864	Lack of Cryptographic Security of IUI Bus MEDIUM (6.1) The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially read or modify data by attaching a specially crafted device while an infusion is running. Published: 2023-07-13T19:03:17.356Z Updated: 2024-10-22T16:07:16.822Z Open on db.gcve.eu Reference links https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-30560`	vulnerable	2026-06-08 06:04:39.875140	PCU Configuration Lacks Authentication MEDIUM (6.8) The configuration from the PCU can be modified without authentication using physical connection to the PCU. Published: 2023-07-13T18:53:49.951Z Updated: 2024-10-31T17:33:02.007Z Open on db.gcve.eu Reference links https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-30559`	vulnerable	2026-06-08 06:04:39.871601	Wireless Card Firmware Improperly Signed MEDIUM (5.2) The firmware update package for the wireless card is not properly signed and can be modified. Published: 2023-07-13T17:50:13.176Z Updated: 2024-08-02T14:28:51.809Z Open on db.gcve.eu Reference links https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-25165`	vulnerable	2026-06-08 05:22:36.076856	Details available BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlier The affected products are vulnerable to a network session authentication vulnerability within the authentication process between specified versions of the BD Alaris PC Unit and the BD Alaris Systems Manager. If exploited, an attacker could perform a denial-of-service attack on the BD Alaris PC Unit by modifying the configuration headers of data in transit. A denial-of-service attack could lead to a drop in the wireless capability of the BD Alaris PC Unit, resulting in manual operation of the PC Unit. Published: 2020-11-13T15:06:08.000Z Updated: 2024-08-04T15:26:09.484Z Open on db.gcve.eu Reference links https://us-cert.cisa.gov/ics/advisories/icsma-20-317-01	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.