Becton Dickinson & Co
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| BD Alarisâ„¢ Point-of-Care Unit (PCU) Model 8015 | 3 | – | Jul 13, 2023 |
| BD Alarisâ„¢ Systems Manager | 2 | – | Jul 13, 2023 |
| BD COR™ System | 1 | – | Dec 17, 2024 |
| BD EpiCenter™ Microbiology Data Management System | 1 | – | Dec 17, 2024 |
| BD MAX™ System | 1 | – | Dec 17, 2024 |
| BD Phoenix™ M50 Automated Microbiology System | 1 | – | Dec 17, 2024 |
| BD Synapsys™ Informatics Solution | 1 | – | Dec 17, 2024 |
| BD Alarisâ„¢ Guardrailsâ„¢ Editor | 1 | – | Jul 13, 2023 |
| CQI Reporter | 1 | – | Jul 13, 2023 |
| BD BACTEC™ Blood Culture System | 1 | – | Dec 17, 2024 |
Exploited and recent CVEs
- CVE-2024-10476 Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as pro 0.2%
- CVE-2024-10476 Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as pro 0.2%
- CVE-2024-10476 Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as pro 0.2%
- CVE-2024-10476 Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as pro 0.2%
- CVE-2024-10476 Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as pro 0.2%
- CVE-2024-10476 Default credentials are used in the above listed BD Diagnostic Solutions products. If exploited, threat actors may be able to access, modify or delete data, including sensitive information such as pro 0.2%
- CVE-2023-30565 CQI Data Sniffing 0.1%
- CVE-2023-30564 Stored Cross-Site Scripting on Device Import Functionality 0.3%
- CVE-2023-30563 Stored Cross-Site Scripting on User Import Functionality 0.4%
- CVE-2023-30562 Lack of Dataset Integrity Checking 0.2%
- CVE-2023-30561 Lack of Cryptographic Security of IUI Bus 0.2%
- CVE-2023-30560 PCU Configuration Lacks Authentication 0.3%
- CVE-2023-30559 Wireless Card Firmware Improperly Signed 0.2%