Vulnerability

BD BodyGuard infusion pumps can be reconfigured through the RS-232 port

MedDevice Cyber Staff · Dec 1 · 2 min read · Via CISA ICSMA-22-335-01

CISA published advisory ICSMA-22-335-01 on December 1, 2022, covering CVE-2022-43557 in BD BodyGuard pumps, including the CME BodyGuard 323 2nd Edition, the 323 Color Vision 2nd and 3rd Editions and the BodyGuard Twins 2nd Edition. BD disclosed it.

The pumps allow access through the RS-232 serial port interface without a protection mechanism for that alternate interface (CWE-1299, CVSS v3 5.3). A threat actor with physical access, specialized equipment and knowledge could configure or disable the pump. No ePHI, PHI or PII is stored on the pump.

The vector carries high attack complexity and a physical requirement, and the availability impact is high. On an ambulatory pump that travels with the patient, physical access is less of a barrier than it is for equipment bolted inside a hospital.

BD directs users to its security bulletin for further detail. The advisory does not name a fixed version.

A service port that changes therapy settings needs authentication, or a physical seal you actually check.

Are you a representative of BD? Submit an official response →

Remediation Desk

For ProvidersOperators, hospitals, and clinical engineering

The advisory names no fixed version for BD BodyGuard pumps. Control physical custody of the pumps, check the RS-232 port at issue and return, and follow BD's security bulletin for further guidance.

Control pump custody. Track who has each pump and limit handling to trained staff and the patient.
Inspect the serial port. Check the RS-232 port for attached equipment or tampering when pumps are issued and returned.
Verify settings after service. Confirm the pump configuration matches the order after any maintenance or return.
Follow BD's bulletin. Review BD's BodyGuard RS-232 bulletin for updated guidance.

For Device ManufacturersAm I affected, and how to fix the class

Am I affected?

This class applies to devices with the signals and properties below. Check them against your product to gauge exposure. The named product rows list what the sources state about the affected product.

Required

Serial interface Therapy delivery

Contributing

Home use

BodyGuard Pumps

PID-14 Serial interface Therapy delivery

Fix the class in your product

A production device ships with a debug interface live and reachable. As the maker, disable or fuse-lock the debug interface before the device ships, provision unique secrets rather than embedded ones, encrypt every link, and authenticate the paths that change device behavior.

Fuse-lock debug ports. Permanently disable JTAG and SWD at production boot; verify per unit as a manufacturing gate.
Engage readout protection. Enable hardware readout protection so flash cannot be dumped.
Authenticate control paths. No maintenance path bypasses authentication on commands that change behavior.

Mapped EMB3D mitigations

Products potentially also affected

Products whose own public documentation shares this advisory's attributes. A shared attribute is a lead, not a finding. The status column shows only what each manufacturer has said.

Product	Manufacturer	Shared with this advisory	Manufacturer status
IonicRF Generator	Abbott	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
SafeOp 2: Neural Informatix System	Alphatec Spine	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
BD Alaris System with Guardrails Suite MX v12.1.2	BD	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Babyroo TN300	Dräger	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Agilia VP Infusion System	Fresenius Kabi	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Venue Go	GE HealthCare	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
da Vinci E-200 Electrosurgical Generator	Intuitive	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Endoflip 300	Medtronic	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Smart Cable NMT Module and Accessories	Nihon Kohden	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Zenition 70	Philips	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Zenition 90	Philips	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Accu-Chek Guide Solo diabetes manager blood glucose monitoring system	Roche	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
All-Day Clear Slim ADCS1 Hearing Aid. All-Day Clear ADC1 Hearing Aid	Sonova	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Connected OR Hub with Device and Voice Control	Stryker	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer
Nu-beca Transcutaneous Electrical Nerve Stimulation	TaiDoc Technology	Same property (MITRE EMB3D)PID-14	No feedback feed from manufacturer

2 more products match. Each manufacturer page lists its products and the advisories they share attributes with.

Questions & Answers

What is CVE-2022-43557 in BD BodyGuard pumps?

CVE-2022-43557 (CWE-1299, CVSS v3 5.3) lets someone with physical access, specialized equipment and knowledge configure or disable BD BodyGuard infusion pumps through the RS-232 serial port. CISA published it as ICSMA-22-335-01 on December 1, 2022.

Do BD BodyGuard pumps store patient data?

No. CISA advisory ICSMA-22-335-01, published December 1, 2022, says no ePHI, PHI or PII is stored in BD BodyGuard pumps. The risk from CVE-2022-43557 is reconfiguration or disabling of the pump.

← Back to Vulnerabilities