CVE-2022-43557 Vulnerability Details

  /     /     /  

CVE-2022-43557 Metadata Quick Info

CVE Published: 05/12/2022 | CVE Updated: 03/08/2024 | CVE Year: 2022
Source: BD | Vendor: Becton, Dickinson and Company (BD) | Product: BodyGuard™ Pump
Status : PUBLISHED

---

CVE-2022-43557 Description

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump.

Metrics

CVSS Version: 3.1 | Base Score: 5.3 MEDIUM
Vector: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

l➤ Exploitability Metrics:
    Attack Vector (AV)* PHYSICAL
    Attack Complexity (AC)* HIGH
    Privileges Required (PR)* NONE
    User Interaction (UI)* NONE
    Scope (S)* UNCHANGED

l➤ Impact Metrics:
    Confidentiality Impact (C)* LOW
    Integrity Impact (I)* LOW
    Availability Impact (A)* HIGH

Weakness Enumeration (CWE)

CWE-ID: CWE-1299
CWE Name: CWE-1299 Missing Protection Mechanism for Alternate Hardware Interface
Source: Becton, Dickinson and Company (BD)

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID: CAPEC-115
CAPEC Description: CAPEC-115 Authentication Bypass


Source: NVD (National Vulnerability Database).