The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump.
References
| Link | Resource |
|---|---|
| https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-bodyguard-pumps-rs-232-interface-vulnerability | Mitigation Vendor Advisory |
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
Configuration 4 (hide)
| AND |
|
Configuration 5 (hide)
| AND |
|
Configuration 6 (hide)
| AND |
|
Configuration 7 (hide)
| AND |
|
History
27 Oct 2023, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump. |
09 Dec 2022, 00:32
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-bodyguard-pumps-rs-232-interface-vulnerability - Mitigation, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.3 |
| First Time |
Bd bodyguard T 999-103
Bd bodyguard Duo 999-903 Firmware Bd bodyguard 121 Twins Firmware Bd bodyguard Epidural 999-683 Bd bodyguard Epidural 999-683 Firmware Bd Bd bodyguard Pain Manager 999-803 Bd bodyguard T 999-103 Firmware Bd bodyguard 999-603 Bd bodyguard 323 Colorvision Firmware Bd bodyguard Pain Manager 999-803 Firmware Bd bodyguard Duo 999-903 Bd bodyguard 121 Twins Bd bodyguard 999-603 Firmware Bd bodyguard 323 Colorvision |
|
| CWE | CWE-287 | |
| CPE | cpe:2.3:o:bd:bodyguard_epidural_999-683_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:bd:bodyguard_pain_manager_999-803_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:bd:bodyguard_duo_999-903:-:*:*:*:*:*:*:* cpe:2.3:o:bd:bodyguard_duo_999-903_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:bd:bodyguard_pain_manager_999-803:-:*:*:*:*:*:*:* cpe:2.3:o:bd:bodyguard_121_twins_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:bd:bodyguard_t_999-103_firmware:-:*:*:*:*:*:*:* cpe:2.3:o:bd:bodyguard_999-603_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:bd:bodyguard_epidural_999-683:-:*:*:*:*:*:*:* cpe:2.3:h:bd:bodyguard_t_999-103:-:*:*:*:*:*:*:* cpe:2.3:h:bd:bodyguard_999-603:-:*:*:*:*:*:*:* cpe:2.3:h:bd:bodyguard_323_colorvision:-:*:*:*:*:*:*:* cpe:2.3:o:bd:bodyguard_323_colorvision_firmware:-:*:*:*:*:*:*:* cpe:2.3:h:bd:bodyguard_121_twins:-:*:*:*:*:*:*:* |
05 Dec 2022, 23:40
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-12-05 22:15
Updated : 2023-12-10 14:48
NVD link : CVE-2022-43557
Mitre link : CVE-2022-43557
CVE.ORG link : CVE-2022-43557
JSON object : View
Products Affected
bd
- bodyguard_t_999-103_firmware
- bodyguard_121_twins
- bodyguard_epidural_999-683
- bodyguard_epidural_999-683_firmware
- bodyguard_121_twins_firmware
- bodyguard_pain_manager_999-803
- bodyguard_duo_999-903_firmware
- bodyguard_duo_999-903
- bodyguard_pain_manager_999-803_firmware
- bodyguard_999-603_firmware
- bodyguard_323_colorvision
- bodyguard_323_colorvision_firmware
- bodyguard_t_999-103
- bodyguard_999-603