PT-2023-22793 · Unknown · Cqi Reporter Application+1

Published 2023-07-13 · Updated 2023-07-25 · CVE-2023-30565

Positive Technologies (AI Summary)

CVSS v3.1

3.5

Low

Base vector

AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Systems Manager (affected versions not specified) CQI Reporter application (affected versions not specified)

Description The issue is related to an insecure connection between Systems Manager and the CQI Reporter application, which could potentially expose infusion data to an attacker.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Cleartext Transmission of Sensitive Information

Weakness Enumeration

CWE-319

CWE-924

Related Identifiers

CVE-2023-30565

Affected Products

Cqi Reporter Application

Systems Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2023-30565 · Security Note
• https://bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-30565 · Vendor Advisory
• https://t.me/cibsecurity/66707 · Telegram Post
• https://t.me/cvenotify/54321 · Telegram Post