PT-2017-9647 · Becton · Alaris 8015 Point Of Care Unit+1
Asher Davila Loranca
+2
·
Published
2017-02-13
·
Updated
2022-03-03
·
CVE-2016-8375
CVSS v3.1
4.9
Medium
| Vector | AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit versions 9.5 and prior
Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit version 9.7
Becton, Dickinson and Company (BD) Alaris 8000 PC unit
Description
An issue allows an unauthorized user with physical access to obtain unencrypted wireless network authentication credentials and other sensitive technical data by disassembling the PC unit and accessing the device's flash memory. The affected devices store sensitive data on internal flash memory, requiring special tools to extract and increasing the likelihood of detection if carried out in a healthcare facility.
Recommendations
For Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit versions 9.5 and prior, consider implementing additional physical security measures to prevent unauthorized access to the device.
For Becton, Dickinson and Company (BD) Alaris 8015 Point of Care (PC) unit version 9.7, restrict access to the device's internal components to minimize the risk of exploitation.
For Becton, Dickinson and Company (BD) Alaris 8000 PC unit, ensure that the device is stored in a secure location when not in use to prevent unauthorized physical access.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alaris 8000 Pc Unit
Alaris 8015 Point Of Care Unit