CVE-2023-30559
CVE-2023-30559 is a medium-severity vulnerability in Bd Alaris 8015 Pcu Firmware with a CVSS 3.x base score of 5.2. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-287.
Key facts
- Severity: Medium (CVSS 3.x base score 5.2)
- EPSS exploit prediction: 0% (5th percentile)
- Actively exploited: Not listed in CISA KEV
- Weakness: CWE-287
- Affected product: Bd Alaris 8015 Pcu Firmware
- Published:
- Last modified:
Description
The firmware update package for the wireless card is not properly signed and can be modified.
Frequently asked questions
- What is CVE-2023-30559?
- The firmware update package for the wireless card is not properly signed and can be modified.
- How severe is CVE-2023-30559?
- CVE-2023-30559 has a CVSS 3.x base score of 5.2, rated medium severity. It is exploitable over physical access with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is low, integrity none, and availability high.
- Is CVE-2023-30559 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (5th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2023-30559?
- CVE-2023-30559 affects Bd Alaris 8015 Pcu Firmware. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2023-30559?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2023-30559 published?
- CVE-2023-30559 was published on 2023-07-13 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:o:bd:alaris_8015_pcu_firmware:*:*:*:*:*:*:*:*
More vulnerabilities in Bd Alaris 8015 Pcu Firmware
- CVE-2020-25165 — High (CVSS 7.5): BD Alaris PC Unit, Model 8015, Versions 9.33.1 and earlier and BD Alaris Systems Manager, Versions 4.33 and earlier The…
- CVE-2023-30560 — Medium (CVSS 6.8): The configuration from the PCU can be modified without authentication using physical connection to the PCU.
- CVE-2023-30561 — Medium (CVSS 6.1): The data flowing between the PCU and its modules is insecure. A threat actor with physical access could potentially…
All CVEs affecting Bd Alaris 8015 Pcu Firmware →
Other CWE-287 (Improper Authentication) vulnerabilities
- CVE-2026-45480 — Critical (CVSS 10.0): Improper authentication in Azure Active Directory allows an unauthorized attacker to elevate privileges over a network.
- CVE-2026-46389 — Critical (CVSS 10.0): UDS Identity Config builds the Keycloak configuration image (realm, plugins, theme, truststore, JARs) consumed by UDS…
- CVE-2026-10611 — Critical (CVSS 10.0): An authentication bypass vulnerability exists in MISP when LDAP mixed authentication is enabled with OTP enforcement.…
- CVE-2026-47280 — Critical (CVSS 10.0): Improper authentication in Azure Resource Manager (ARM) allows an unauthorized attacker to elevate privileges over a…
- CVE-2026-42822 — Critical (CVSS 10.0): Improper authentication in Azure Local Disconnected Operations allows an unauthorized attacker to elevate privileges…
- CVE-2026-20182 — Critical (CVSS 10.0): May 2026: This security advisory provides the details and fix information for a vulnerability that was discovered and…
Browse all CWE-287 (Improper Authentication) vulnerabilities →