BD Alaris Gateway Workstation

Risk Summary

Exploitation of these vulnerabilities could allow unauthorized arbitrary code execution, which could allow an attacker to view and edit device status and configuration details as well as cause devices to become unavailable. The vendor has stated the affected products are not sold in the United States.

CVEs (2)

Remediations

• BD recommends the following mitigations and compensating controls in order to reduce risk associated with these vulnerabilities.
• For the Alaris Gateway Workstation Web Browser User Interface vulnerability:
• For the Alaris Gateway Workstation Dangerous File Upload vulnerability:
• BD is currently assessing additional remediation efforts, including an adjustment to restrict the SMB protocol.
• For more information on BD 's product security and vulnerability management, contact BD 's Product Security Office at:
• https://www.bd.com/en-us/support/product-security-and-privacy/product-security-bulletins
• https://www.fda.gov/MedicalDevices/DigitalHealth/ucm373213.htm

Affected Vendors

Affected Products (11)

Affected Sectors

Healthcare and Public Health