BD Alaris Infusion Central
view advisory published 2023-02-16
This updated advisory is a follow-up to the original advisory titled ICSMA-23-047-01 BD Alaris Infusion Central that was published February 16, 2023, to the ICS webpage on www.cisa.gov/uscert.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2022-47376US | high7.3 | — | ||
The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health data is stored in the database, although s… | ||||
02
references
External citations — patches, advisories, analysis.
- Recommended Practicesexternal
- ICS Advisory ICSMA-23-047-01 JSONself
- Recommended Practicesexternal
- ICS Advisory ICSMA-23-047-01 Web Versionself
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (2)
- MitigationAlaris Infusion Central software
Change passwords periodically per best security practice.
- FixedAlaris Infusion Central software
BD is directly reaching out to the small group of customers who may be impacted by this vulnerability to initiate remediation.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan