CVE-2022-43557 - CVE House
Back to Database
Status published Medium CVE-2022-43557

BD BodyGuard™ Pumps – RS-232 Interface Vulnerability

Vulnerability Description

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-43557

Credits & Attribution

No credits recorded in the NVD database.

References

More from Becton, Dickinson and Company (BD)

View All →
CVE-2023-29066
Incorrect User Management
Low 3.2
CVE-2023-29065
Overly Permissive Access Policy
Medium 4.1
CVE-2023-29064
Hardcoded Secrets
Medium 4.1
CVE-2023-29063
Lack of DMA Access Protections
Low 2.4
CVE-2023-29062
Unsecure Identity Verification
Low 3.8

Affected Vendor

Becton, Dickinson and Company (BD)

View all reports →

Affected Software

BodyGuard™ Pump
Vulnerable Versions:
BD BodyGuard™ , CME BodyGuard™ 323 (2nd Edition), CME BodyGuard™ 323 Color Vision (2nd Edition), CME BodyGuard™ 323 Color Vision (3rd Edition), CME BodyGuard™ Twins (2nd Edition)

Timeline

Official Publish: December 5th, 2022
Last Modified: April 23rd, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Weaknesses (CWE)

CWE-1299

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.