CVE-2022-43557

BD BodyGuard™ Pumps – RS-232 Interface Vulnerability

State: Published
Severity: 5.3 Medium
Published: Dec 5, 2022
Updated: Apr 23, 2025
Reserved: Oct 20, 2022

Description

The BD BodyGuard™ infusion pumps specified allow for access through the RS-232 (serial) port interface. If exploited, threat actors with physical access, specialized equipment and knowledge may be able to configure or disable the pump. No electronic protected health information (ePHI), protected health information (PHI) or personally identifiable information (PII) is stored in the pump.

Scores

CVSS	Score	Vector	Source
3.1	5.3 Medium	CVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H	BD

Weaknesses

CWE-1299 Missing Protection Mechanism for Alternate Hardware Interface

Affected Products

Product	Versions
BodyGuard™ PumpBecton, Dickinson and Company (BD)	BD BodyGuard™ Affected CME BodyGuard™ 323 (2nd Edition)Affected CME BodyGuard™ 323 Color Vision (2nd Edition)Affected CME BodyGuard™ 323 Color Vision (3rd Edition)Affected CME BodyGuard™ Twins (2nd Edition)Affected

References

https://www.bd.com/en-us/about-bd/cybersecurity/bulletin/bd-bodyguard-pumps-rs-232-interface-vulnerabilityvendor-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.