CVE-2020-25165

State
Published
Severity
Not scored
Published
Nov 13, 2020
Updated
Aug 4, 2024
Reserved
Sep 4, 2020

Read the record on cve.org

Description

BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlier The affected products are vulnerable to a network session authentication vulnerability within the authentication process between specified versions of the BD Alaris PC Unit and the BD Alaris Systems Manager. If exploited, an attacker could perform a denial-of-service attack on the BD Alaris PC Unit by modifying the configuration headers of data in transit. A denial-of-service attack could lead to a drop in the wireless capability of the BD Alaris PC Unit, resulting in manual operation of the PC Unit.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-287 IMPROPER AUTHENTICATION CWE-287

Affected Products

ProductVersions
BD Alaris PC Unit and BD Alaris Systems Managern/a
  • BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.