CVE-2023-30562 : A GRE dataset file within Systems Manager can be tampered with and distributed t

A GRE dataset file within Systems Manager can be tampered with and distributed to PCUs.

Published 2023-07-13 20:15:09

Updated 2024-02-16 16:51:05

View at NVD, CVE.org

Products affected by CVE-2023-30562

BD » Alaris Guardrails Editor
Versions up to, including, (<=) 12.1.2
cpe:2.3:a:bd:alaris_guardrails_editor:*:*:*:*:*:*:*:*
Matching versions

EPSS FAQ

0.04%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 7 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
6.7	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H	1.5	5.2	Becton, Dickinson and Company (BD)
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: High Availability: High
3.0	LOW	CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N	1.5	1.4	Becton, Dickinson and Company (BD)
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: Low Availability: None
6.7	MEDIUM	CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:N/I:H/A:H	1.5	5.2	NIST
Attack Vector: Adjacent Network Attack Complexity: Low Privileges Required: Low User Interaction: Required Scope: Unchanged Confidentiality: None Integrity: High Availability: High

Jump to