Lucene search

BDCVE-2023-30562

HistoryJul 13, 2023 - 8:15 p.m.

CVE-2023-30562

2023-07-1320:15:09

CWE-345

web.nvd.nist.gov

cve-2023-30562

gre dataset

systems manager

tampering

pcus

nvd

CVSS3

6.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

Percentile

9.0%

JSON

A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs.

Affected configurations

Nvd

Node

bdalaris_guardrails_editorRange≤12.1.2

VendorProductVersionCPE
bdalaris_guardrails_editor*cpe:2.3:a:bd:alaris_guardrails_editor:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
bd	alaris_guardrails_editor	*	cpe:2.3:a:bd:alaris_guardrails_editor::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "BD Alarisâ„¢ Guardrailsâ„¢ Editor",
    "vendor": "Becton Dickinson & Co",
    "versions": [
      {
        "lessThanOrEqual": "12.1.2",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "12.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

References

www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx

CVSS3

6.7

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H

AI Score

6.5

Confidence

High

EPSS

Percentile

9.0%

JSON

Related for CVE-2023-30562