BD

Stories

46

Products named

94

Product CVEs

75

Responses on record

0

Latest story

Dec 20, 2024

01

FDA

FDA counted 111 open software defect tickets at BD

A warning letter over quality system violations flagged open tickets for software defects categorized as catastrophic or severe patient harm, plus safety complaints reported late.

MedTech DiveDec 202 min read

02

Vulnerability

Default credentials across a line of diagnostic instruments

ICSMA-24-352-01: BD Diagnostic Solutions instruments including BACTEC and Phoenix shipped with default credentials, letting an attacker with network access read, modify or delete data including PHI.

CISADec 172 min read

03

Vulnerability

BD lists 19 Pyxis, Parata and CCE products as affected by ESET flaw CVE-2024-0353

BD's March 29, 2024 bulletin lists 19 products, including Pyxis Medstation and Anesthesia Station systems, as affected by CVE-2024-0353 in ESET real-time file protection on Windows; an update was made available for BD-managed products.

BDMar 293 min read

04

Vulnerability

BD FACSChorus workstations leave USB, BIOS and PCIe open and store admin secrets in plaintext

CISA advisory ICSMA-23-331-01 lists seven vulnerabilities, CVE-2023-29060 through CVE-2023-29066 (CVSS v3 up to 5.4), in BD FACSChorus 3.0, 3.1, 5.0 and 5.1 and their HP workstations. BD will address them in an upcoming release and recommends compensating controls.

CISANov 274 min read

05

Vulnerability

BD Alaris PC Unit 8015 BusyBox flaws expose Wi-Fi credentials through crafted DHCP

BD's October 26, 2023 bulletin says BusyBox flaws CVE-2016-2148, CVE-2018-1000517, CVE-2018-20679 and CVE-2019-5747 in the Alaris PC Unit 8015 and FocalPoint Slide Profiler APPS Workstation could expose wireless credentials; PC Unit software 12.3.1 addresses three.

BDOct 263 min read

06

Vulnerability

BD Alaris System with Guardrails Suite MX has unsigned wireless firmware and tamperable datasets

CISA advisory ICSMA-23-194-01 covers eight flaws across the BD Alaris System with Guardrails Suite MX, including an unsigned wireless card firmware package on the PCU Model 8015 (CVE-2023-30559) and a tamperable Guardrails dataset (CVE-2023-30562). BD Alaris System 12.3 fixes some; three PCU flaws remain in 12.3.1.

CISAJul 134 min read

07

Vulnerability

BD Kiestra service credential surfaced in a public file-analysis report

BD disclosed on April 24, 2023 that a service credential for BD Kiestra TLA, WCA and ReadA with SCU, used only by BD personnel, was temporarily public through a file-analysis service report; BD had it removed and saw no access.

BDApr 242 min read

08

Vulnerability

BD Alaris Infusion Central leaves a recoverable database password after installation

CISA advisory ICSMA-23-047-01 covers CVE-2022-47376 (CWE-257, CVSS v3.1 7.3) in BD Alaris Infusion Central 1.1 through 1.3.2, where a recoverable password left after installation can expose the database. BD is contacting the small group of affected customers to remediate.

CISAFeb 162 min read

09

Vulnerability

BD BodyGuard infusion pumps can be reconfigured through the RS-232 port

CISA advisory ICSMA-22-335-01 covers CVE-2022-43557 (CWE-1299, CVSS 5.3) in BD BodyGuard infusion pumps, including the CME BodyGuard 323 and Twins editions: access through the RS-232 serial port could let someone with physical access configure or disable the pump.

CISADec 12 min read

10

Vulnerability

BD Totalys MultiProcessor 1.70 and earlier uses hard-coded credentials

CISA advisory ICSMA-22-277-01 covers CVE-2022-40263 (CWE-798, CVSS 6.6), hard-coded credentials in BD Totalys MultiProcessor 1.70 and earlier that could expose ePHI, PHI and PII. BD scheduled the fix for version 1.71 in Q4 2022.

CISAOct 42 min read

11

Vulnerability

BD Pyxis products may still run on shared default operating system credentials

CISA advisory ICSMA-22-151-01 covers CVE-2022-22767 (CVSS 8.8): BD Pyxis products installed with default credentials, sometimes shared across product types and domain-joined servers, that can give privileged file system access and ePHI. BD is rolling out credential management.

CISAMay 313 min read

12

Vulnerability

BD Synapsys sessions did not expire, risking changes to patient data

CISA advisory ICSMA-22-151-02 covers CVE-2022-30277 (CWE-613, CVSS 5.7), insufficient session expiration in BD Synapsys 4.20, 4.20 SR1 and 4.30. Version 4.20 SR2 and an upgrade path to 5.10 address it.

CISAMay 312 min read

13

Vulnerability

BD Pyxis dispensing and supply systems ship with hard-coded credentials across 24 products

CISA advisory ICSMA-22-062-01 covers CVE-2022-22766 (CVSS v3 7.0), BD-managed hard-coded credentials in all versions of 24 BD Pyxis and Rowa products that can lead to the file system and ePHI. BD is strengthening credential management and recommends compensating controls.

CISAMar 33 min read

14

Vulnerability

BD Viper LT system uses hard-coded credentials that expose patient data

CISA advisory ICSMA-22-062-02 covers CVE-2022-22765 (CWE-798, CVSS 8.0), hard-coded credentials in the BD Viper LT system Version 2.0 and later. BD expects the fix in Viper LT Version 4.80 and recommends compensating controls meanwhile.

CISAMar 32 min read

15

Vulnerability

BD lists Kiestra and HealthSight products as affected by Apache Log4j flaws

BD's February 4, 2022 bulletin lists BD Kiestra TLA, WCA and ReadA with SCU, HealthSight Infection Advisor and Clinical Advisor, and BD Insights Research Analytics Dashboards as affected by Log4j CVE-2021-44228 and CVE-2021-45046 in third-party components.

BDFeb 43 min read

16

Vulnerability

BD lists more than 20 product lines in scope for PrintNightmare CVE-2021-34527

BD's August 16, 2021 bulletin lists BD products in scope for PrintNightmare, the Windows Print Spooler remote code execution flaw CVE-2021-34527, from BACTEC and BD MAX to Pyxis, Rowa and Site~Rite 8; BD reports no exploitation.

BDAug 163 min read

17

Vulnerability

BD lists FACS, Pyxis and Kiestra products in scope for Win32k zero-day CVE-2021-1732

BD's July 29, 2021 bulletin lists BD products using Windows 10 and Windows Server 2019 components affected by the Win32k zero-day CVE-2021-1732, including FACS cytometers, Pyxis systems and Kiestra lab automation; BD reports no exploitation.

BDJul 292 min read

18

Vulnerability

BD lists Pyxis, HealthSight and Alaris servers as affected by VMware ESXi flaws

BD's June 4, 2021 bulletin lists 16 BD products, including Alaris Systems Manager, HealthSight, Kiestra and Pyxis servers, as affected by VMware ESXi, Workstation, Fusion and NSX-T flaws CVE-2020-3992, CVE-2020-3993, CVE-2020-3981, CVE-2020-3982, CVE-2020-3994 and CVE-2020-3995.

BDJun 42 min read

19

Vulnerability

BD tests Microsoft's Bad Neighbor patch for FACS, Pyxis and Rowa products

BD's December 3, 2020 bulletin lists BD products affected by CVE-2020-16898, the Windows TCP/IP ICMPv6 Router Advertisement flaw known as Bad Neighbor that Microsoft patched October 13, 2020, and says BD is testing the patch.

BDDec 33 min read

20

Vulnerability

BD Alaris 8015 PC Unit and Systems Manager session authentication flaw can knock pumps off wireless

CISA advisory ICSMA-20-317-01 covers CVE-2020-25165 (CWE-287, CVSS 6.5), a network session authentication flaw between the BD Alaris PC Unit Model 8015 (9.33.1 and prior) and BD Alaris Systems Manager (4.33 and prior). Systems Manager 12.0.1 and later fix the server side. Medigate reported it.

CISANov 123 min read

21

Vulnerability

BD lists Knowledge Portal, HealthSight and Kiestra products in scope for Zerologon

BD's November 6, 2020 bulletin lists BD Knowledge Portals, Intelliport, Kiestra and HealthSight products that use affected Netlogon Remote Protocol versions as in scope for Zerologon, CVE-2020-1472; BD reports no exploitation.

BDNov 62 min read

22

Vulnerability

BD maps its product line against the vulnerabilities Ryuk ransomware exploits

BD's October 30, 2020 Ryuk ransomware bulletin lists BD products in scope for vulnerabilities Ryuk crews exploited against healthcare, including CVE-2017-0144 and CVE-2018-8389; a November 6, 2020 update added Zerologon CVE-2020-1472 and BD Intelliport.

BDOct 303 min read

23

Vulnerability

BD lists BACTEC, Kiestra and Pyxis systems in scope for .NET flaw CVE-2020-1147

BD's September 28, 2020 bulletin lists BD products on affected Windows versions in scope for CVE-2020-1147, a remote code execution flaw in Microsoft .NET Framework, SharePoint and Visual Studio patched July 14, 2020.

BDSep 283 min read

24

Vulnerability

BD tests Windows DNS Server patch for CVE-2020-1350 on Alaris, HealthSight and Kiestra

BD's September 8, 2020 bulletin lists Alaris Systems Manager, FocalPoint Large Lab Server, HealthSight, Kiestra and Knowledge Portal products as affected by CVE-2020-1350 in Windows DNS Server and says BD is testing Microsoft's patch.

BDSep 82 min read

25

Vulnerability

BD lists Pyxis and Alaris servers on VMware ESXi as affected by CVE-2020-3957 to 3959

BD's August 31, 2020 bulletin says VMware vulnerabilities CVE-2020-3957, CVE-2020-3958 and CVE-2020-3959 could affect BD products that use VMware ESXi, including Alaris Systems Manager Server and Pyxis server products.

BDAug 312 min read

26

Vulnerability

BD finds Ripple20 Treck TCP/IP stack in Kiestra and Rowa components

BD's July 30, 2020 bulletin says the Treck TCP/IP stack vulnerabilities known as Ripple20, CVE-2020-11896 through CVE-2020-11907, could affect third-party components in BD Kiestra TLA, WCA and ReadA with SCU and BD Rowa conveyor technology and label printers.

BDJul 303 min read

27

Vulnerability

BD Alaris PC Unit can drop off hospital Wi-Fi through a Linux kernel flaw

CISA advisory ICSMA-20-170-06 reports that BD Alaris PC Unit versions 9.13, 9.19, 9.33 and 12.1 carry a vulnerable Linux kernel (CVE-2019-11479, CVSS v3 5.3) that can cause a denial of service and disconnect the unit from the facility wireless network.

CISAJun 182 min read

28

Vulnerability

BD tests SMBv3 patch for CVE-2020-0796 on FACS and LSR cytometer workstations

BD's June 15, 2020 bulletin lists BD FACS and LSR flow cytometers that use Windows 10 as affected by CVE-2020-0796, a remote code execution flaw in Microsoft SMBv3, and says BD is testing the patch.

BDJun 153 min read

29

Vulnerability

BD lists FocalPoint, Kiestra and BD MAX in scope for three Remote Desktop flaws

BD's April 3, 2020 bulletin lists BD products that use affected Windows components in scope for Microsoft Remote Desktop remote code execution flaws CVE-2020-0609, CVE-2020-0610 and CVE-2020-0611, and says BD is testing Microsoft's patches.

BDApr 32 min read

30

Vulnerability

BD Pyxis MedStation ES and Pyxis Anesthesia ES kiosk mode can be escaped with physical access

CISA advisory ICSMA-20-091-01 covers CVE-2020-10598 (CVSS v3 6.8), a kiosk mode escape in BD Pyxis MedStation ES and Pyxis Anesthesia (PAS) ES System version 1.6.1 that exposes sensitive data. BD is deploying an update that strengthens kiosk mode.

CISAMar 312 min read

31

Vulnerability

BD monitors Win32k flaws CVE-2019-1458 and CVE-2019-1468

BD's February 18, 2020 bulletin says it is monitoring Microsoft Win32k vulnerabilities CVE-2019-1458 and CVE-2019-1468, which Microsoft patched; they are not specific to BD products and BD has no reports of exploitation.

BDFeb 182 min read

32

Vulnerability

BD tests Microsoft fix for CryptoAPI spoofing flaw CVE-2020-0601

BD's January 31, 2020 bulletin says BD products on affected Windows versions are in scope for CVE-2020-0601, a spoofing flaw in Windows CryptoAPI ECC certificate validation; BD reports no exploitation and is testing Microsoft's patch.

BDJan 313 min read

33

Vulnerability

BD lists IE 9 to 11 workstations in scope for Internet Explorer flaw CVE-2019-1367

BD's December 20, 2019 bulletin lists BD products on workstations running Internet Explorer 9, 10 or 11 in scope for CVE-2019-1367, a flaw that could allow code execution as the current user.

BDDec 202 min read

34

Vulnerability

BD lists Pyxis, Alaris and lab systems in scope for DejaBlue Remote Desktop flaws

BD's October 30, 2019 bulletin lists BD products running Remote Desktop Services on affected Windows versions in scope for DejaBlue, CVE-2019-1181 and CVE-2019-1182, and recommends Microsoft patches and Network Level Authentication.

BDOct 303 min read

35

Vulnerability

BD Pyxis keeps access for expired Active Directory accounts when joined to a hospital domain

CISA advisory ICSMA-19-248-01 covers CVE-2019-13517 (CWE-384, CVSS v3 7.6) in BD Pyxis ES and Pyxis Enterprise Server, where access is not revoked when an Active Directory account expires. BD says the latest software release remediates it.

CISASep 53 min read

36

Vulnerability

BD Alaris Gateway Workstation accepts malicious files during firmware update

CISA advisory ICSMA-19-164-01 covers CVE-2019-10959, an unrestricted file upload during firmware update scored CVSS v3 10.0, and CVE-2019-10962, an unauthenticated web interface (CVSS v3 7.3), in BD Alaris Gateway Workstation firmware 1.0.13 through 1.3.1 Build 13. BD issued compensating controls; the product is not sold in the United States.

CISAJun 133 min read

37

Vulnerability

BD FACSLyric workstations on Windows 10 expose an administrative account

CISA advisory ICSMA-19-029-02 covers CVE-2019-6517 (CVSS 6.8), improper access control to a privileged account on BD FACSLyric flow cytometry workstations running Windows 10 Pro. BD is disabling the admin account on RUO units and replacing IVD workstations.

CISAJan 292 min read

38

Vulnerability

BD Alaris Plus syringe pumps accept unauthenticated commands through a terminal server

CISA advisory ICSMA-18-235-01 covers CVE-2018-14786 (CVSS v3 9.4), missing authentication in BD Alaris Plus CC, GH, GS and TIVA syringe pumps at version 2.3.6 and earlier when the serial port is connected to a terminal server. BD says the attack fails when the pump sits in an Alaris Gateway Workstation dock.

CISAAug 232 min read

39

Vulnerability

BD Kiestra lab automation lets privileged accounts issue SQL commands that can corrupt data

CISA advisory ICSMA-18-142-01 covers CVE-2018-10593 and CVE-2018-10595 (CVSS v3 5.6 and 6.3) in BD Kiestra TLA, WCA and InoqulA+ software: DB Manager 3.0.1.0, PerformA 3.0.0.0 and earlier, and ReadA Overview 1.1.0.2 and earlier. BD is deploying a mitigation remotely or on premise.

CISAMay 222 min read

40

Vulnerability

BD patches KRACK Wi-Fi key reinstallation flaw across 12 Pyxis products

CISA advisory ICSMA-18-114-01 lists 12 BD Pyxis products, all versions, as affected by the KRACK WPA2 key reinstallation flaws (CVE-2017-13077, CVSS 6.8). BD is deploying third-party vendor patches through its routine process and contacting users whose devices need coordination.

CISAApr 243 min read

41

Vulnerability

BD rates Meltdown and Spectre low impact across its instrument and Pyxis lines

BD's January 5, 2018 bulletin lists BD products in scope for the Meltdown and Spectre processor flaws, from FACS cytometers to Pyxis and Rowa, rates the risk low-impact, and recommends patching and firmware updates.

BDJan 53 min read

42

Vulnerability

BD Alaris pumps and Pyxis stations in scope for WPA2 KRACK Wi-Fi flaws

BD's October 27, 2017 bulletin lists Alaris PC Units 8000 and 8015, the Alaris Gateway Workstation and Pyxis stations as in scope for the WPA2 KRACK vulnerabilities; some were patched and others need customer coordination.

BDOct 273 min read

43

Vulnerability

BD Kiestra TLA, WCA and InoqulA+ database open through SMB1 and default credentials

BD's May 16, 2017 bulletin says SMB1, default third-party database credentials and hardcoded application passwords in BD Kiestra database 3.0.61 and earlier could let an attacker reach the Kiestra database and limited PHI and PII.

BDMay 163 min read

44

Vulnerability

BD Kiestra PerformA and KLA Journal Service use a hard-coded database password

CISA advisory ICSMA-17-082-01 reports a hard-coded password (CVE-2017-6022, CVSS v3 7.3) in BD Kiestra PerformA 2.0.14.0 and earlier and KLA Journal Service 1.0.51 and earlier. BD scheduled remote updates between April and October 2017.

CISAMar 232 min read

45

Vulnerability

BD Alaris 8000 PC unit stores wireless network credentials unencrypted in flash memory

CISA advisory ICSMA-17-017-01 reports that all versions of the BD Alaris 8000 PC unit keep wireless network authentication credentials unencrypted on internal flash memory (CVE-2016-8375, CVSS v3 4.9). BD published a security bulletin for the Alaris PC unit model 8000.

CISAJan 172 min read

46

Vulnerability

BD Alaris 8015 PC unit exposes stored Wi-Fi credentials on its removable flash card

CISA advisory ICSMA-17-017-02 covers two physical-access flaws (CVE-2016-8375, CVE-2016-9355) in the BD Alaris 8015 PC unit that expose wireless network credentials and allow writes to device memory. BD has no product fix and points users to compensating controls.

CISAJan 173 min read

• Pyxis medication management system
• BACTEC all blood culture system
• COR all laboratory automation system
• EpiCenter all microbiology data management system
• MAX all molecular diagnostic system
• Phoenix M50 all automated microbiology system
• Synapsys all; only when installed on a NUC server laboratory informatics software
• Pyxis Medstation 4000, ES automated medication dispensing cabinet
• Pyxis Anesthesia Station 4000, ES anesthesia medication dispensing
• Pyxis CIISafe CIISafe, CIISafe ES controlled substance safe
• Pyxis Enterprise Server pharmacy automation server
• BD Care Coordination Engine (CCE) clinical integration software
• Parata IntelliCab Will-Call System pharmacy will-call system
• Parata IntelliVault Controlled Substance Management System controlled substance management
• BD FACSChorus 3.0 and 3.1 (HP Z2 G5, FACSMelody); 5.0 and 5.1 (HP Z2 G9, FACSDiscover S8) flow cytometry cell sorter workstation
• BD Alaris PC Unit Model 8015 infusion pump
• BD FocalPoint Slide Profiler APPS Workstation 3.7.0 to 3.8.1 cytology slide imaging workstation
• BD Alaris Point-of-Care Unit (PCU) Model 8015 12.1.3 and prior infusion pump controller
• BD Alaris Systems Manager 12.3 and prior infusion system management server
• BD Alaris Guardrails Editor 12.1.2 and prior drug library editor
• CQI Reporter 10.17 and prior infusion data reporting software
• Calculation Services 1.0 and prior infusion system software service
• BD Kiestra TLA, WCA and ReadA with SCU TLA with SCU, WCA with SCU, ReadA with SCU microbiology lab automation
• Alaris Infusion Central 1.1 through 1.3.2 infusion management server software
• BodyGuard Pumps All versions; CME BodyGuard 323 2nd Edition, 323 Color Vision 2nd Edition, 323 Color Vision 3rd Edition, BodyGuard Twins 2nd Edition infusion pump
• BD Totalys MultiProcessor 1.70 and earlier laboratory instrument
• BD Pyxis All versions: CIISafe, ES Anesthesia Station, Logistics, MedBank, MedStation 4000, MedStation ES, MedStation ES Server, ParAssist, Rapid Rx, StockStation, SupplyCenter, SupplyRoller, SupplyStation, SupplyStation EC, SupplyStation RF auxiliary medication and supply management system
• BD Rowa Pouch Packaging Systems All versions pharmacy pouch packaging system
• BD Synapsys 4.20, 4.20 SR1, 4.30 clinical informatics workstation software
• BD Viper LT system 2.0 and later laboratory diagnostic system
• BD HealthSight Infection Advisor infection surveillance software
• BD HealthSight Clinical Advisor clinical analytics software
• BD Insights Research Analytics Dashboards analytics dashboard software
• BD BACTEC 9240/9120, FX, FX40 blood culture system
• BD MAX molecular diagnostics system
• BD FACS flow cytometers Aria, Canto, Celesta, Duet, Link, Lyric, Melody, SPA III, Symphony flow cytometer
• BD Pyxis CIISafe, MedStation ES, Server ES, IV Prep, Logistics, PharmoPack, SupplyStation automated medication dispensing cabinet
• BD Rowa Dose, Vmax, Smart, ProLog pharmacy automation
• Arctic Sun Analytics, Stat temperature management system
• BD Site~Rite 8 vascular access ultrasound
• BD Totalys MultiProcessor, Remote Station, SlidePrep cytology slide preparation
• BD LSR II and LSRFortessa LSR II, LSRFortessa, LSRFortessa X-20 flow cytometer
• BD Kiestra InoqulA/ReadA standalone, TLA, WCA microbiology lab automation
• BD Accuri C6 Plus flow cytometer
• BD COR molecular diagnostics system
• BD EpiCenter microbiology data management
• Pyxis server products Enterprise Server, Logistics Server, MedStation 4000, SupplyStation pharmacy automation server
• BD HealthSight Clinical Advisor, Data Manager, Diversion Management, Infection Advisor, Inventory Optimization clinical analytics software
• BD Alaris Systems Manager infusion management server
• BD Intelliport medication management system
• BD Knowledge Portals Infusion Technologies, Medication, Supply analytics portal
• BD Totalys Multiprocessor cytology slide preparation
• BD Veritor Connect point-of-care diagnostics connector
• BD Assurity Linc laboratory middleware
• BD Alaris PC Unit Model 8015, 9.33.1 and prior infusion pump point-of-care unit
• BD Alaris Guardrails Suite MX infusion safety software
• BD FocalPoint servers and workstations cytology imaging system
• BD Phoenix M50 microbiology identification system
• BD Diabetes Care (Briight) diabetes management software
• BD FocalPoint Large Lab Server cytology imaging server
• BD Synapsys microbiology informatics
• BD Alaris Systems Manager Server infusion management server
• BD Rowa conveyor technology pharmacy conveyor system
• BD Rowa label printer pharmacy label printer
• Alaris PC Unit 9.13, 9.19, 9.33, 12.1 infusion pump point-of-care unit
• BD BACTEC Touch blood culture system
• BD Specimen Collection Verification (SCV) specimen collection software
• BD HealthSight Analytics clinical analytics software
• BD MedMined infection surveillance software
• Pyxis MedStation ES System 1.6.1 automated medication dispensing cabinet
• Pyxis Anesthesia (PAS) ES System 1.6.1 anesthesia medication dispensing station
• BD Viper LT molecular diagnostics system
• BD BACTEC BOW blood culture system
• BD COR system molecular diagnostics system
• Pyxis ES 1.3.4 to 1.5.3 medication dispensing cabinet system
• Pyxis Enterprise Server 4.4 to 4.12 with Windows Server medication management server
• Alaris Gateway Workstation Firmware 1.0.13, 1.1.3 Build 10, 1.1.3 MR Build 11, 1.1.5, 1.1.6, 1.3.0 Build 14, 1.3.1 Build 13; Alaris GS, GH, CC, TIVA 2.3.6 and below infusion pump gateway workstation
• FACSLyric IVD on Windows 10 Professional (U.S. release); Research Use Only on Windows 10 Professional (U.S. and Malaysian releases, November 2017 to November 2018) flow cytometry cell analyzer
• Alaris Plus syringe pumps Alaris CC, GH, GS and TIVA, 2.3.6 and earlier syringe infusion pump
• Kiestra TLA, WCA and InoqulA+ DB Manager 3.0.1.0; PerformA 3.0.0.0 and earlier; ReadA Overview 1.1.0.2 and earlier microbiology lab automation system
• BD Phoenix 100, AP, M50 microbiology identification system
• BD Pyxis products automated medication dispensing cabinet
• Alaris Systems Manager infusion management server
• BD Veritor Plus System point-of-care diagnostics
• BD Alaris Gateway Workstation infusion pump docking gateway
• BD Pyxis Anesthesia ES, 4000, 3500 anesthesia medication dispensing
• BD Pyxis MedStation 4000 T2, ES automated medication dispensing cabinet
• BD Pyxis supply products SupplyStation, Supply Roller, ParAssist, PARx and PARx handheld, StockStation supply management cabinet
• BD Pyxis CIISafe Workstation controlled substance safe
• BD Kiestra TLA, WCA and InoqulA+ BD Kiestra database 3.0.61 and previous; PerformA 2.0.14.0 and previous; KLA Journal Service 1.0.51 and previous microbiology lab automation
• PerformA 2.0.14.0 and earlier lab automation application
• KLA Journal Service 1.0.51 and earlier lab automation application
• Alaris 8000 PC unit All versions point-of-care PC unit
• Alaris 8015 PC unit 9.5 and prior, 9.33 and prior, 9.7 infusion system point-of-care controller

BD products with the device attributes their own public documentation states, and the advisories in our coverage that share those attributes.