Riskcovery

CVE-2023-30565

CQI Data Sniffing

State
Published
Severity
3.5 Low
Published
Jul 13, 2023
Updated
Oct 22, 2024
Reserved
Apr 12, 2023

Read the record on cve.org

Description

An insecure connection between Systems Manager and CQI Reporter application could expose infusion data to an attacker.

Scores

CVSSScoreVectorSource
3.13.5 LowCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NBD

Weaknesses

  • CWE-924 Improper Enforcement of Message Integrity During Transmission in a Communication Channel
  • CWE-319 Cleartext Transmission of Sensitive Information

Affected Products

ProductVersions
CQI ReporterBecton Dickinson & Co
  • 10.17 and earlierAffected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.