CVE-2023-30559 - CVE House

Back to Database

Status published Medium CVE-2023-30559

Wireless Card Firmware Improperly Signed

5.2 CVSS

Vulnerability Description

The firmware update package for the wireless card is not properly signed and can be modified.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-30559

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-alaris-system-with-guardrails-suite-mx

More from Becton Dickinson & Co

View All →

CVE-2023-30560

PCU Configuration Lacks Authentication

Medium 6.8

Affected Vendor

Becton Dickinson & Co

View all reports →

Affected Software

BD Alaris™ Point-of-Care Unit (PCU) Model 8015

Vulnerable Versions:

Timeline

Official Publish: July 13th, 2023

Last Modified: August 2nd, 2024

Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:H

Weaknesses (CWE)

CWE-20 CWE-345

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

Initial Access

T1059 Command and Scripting Interpreter

Execution

T1068 Exploitation for Privilege Escalation

Privilege Escalation

T1213 Data from Information Repositories

Collection

T1565.002 Stored Data Manipulation

Impact

T1557 Adversary-in-the-Middle

Credential Access

T1071 Application Layer Protocol

Command and Control

T1552 Unsecured Credentials